Vulnerabilities in Newsletter 3.5.2