Imagevue version 2.8.9 suffers from cross site scripting and password disclosure vulnerabilities. Continue reading...