Vulnerabilities in iframe 1.6.0