PHPX versions 3.2.3 and below suffer from cross site scripting, code injection, and cookie hijacking flaws.