Vulnerabilities in iframe 2.7