Air Transfer versions 1.2.1 and 1.0.14 suffer from multiple cross site scripting vulnerabilities. Continue reading...