Vulnerabilities in iframe 4.5