Xedus version 1.0 is susceptible to denial of service, cross site scripting, and directory traversal vulnerabilities.