Weblosninger versions 4 and below suffer from cross site scripting and SQL injection vulnerabilities.