Kayako Fusion vulnerabilities

• kayako fusion Cross-site scripting (XSS) vulnerability in __swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs... CVE-2012-3233 Public exploit 4.3 MediumSeptember 15, 2012
• kayako fusion Cross-site scripting (XSS) vulnerability in Tickets/Submit in Kayako Fusion before 4.40.985... CVE-2012-4872 4.3 MediumSeptember 6, 2012