Vulnerabilities in REXML 3.2.1