Vulnerabilities in iframe 4.0