Vulnerabilities in iframe 1.7