Vulnerabilities in REXML