Vulnerabilities in UI for ASP.NET AJAX