Vulnerabilities in REXML 3.2.3