Heatmiser Wifi Thermostat version 1.7 suffers from a cross site request forgery vulnerability. Continue reading...