FTGateOffice/FTGatePro version 1.2 suffers from path exposure, cross site scripting, and validation errors.