Pentaho Bi Server vulnerabilities

• pentaho bi server Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which... CVE-2009-5101 5.0 MediumSeptember 13, 2011
• pentaho bi server Pentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages... CVE-2009-5100 2.1 LowSeptember 13, 2011
• pentaho bi server Cross-site scripting (XSS) vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and... CVE-2009-5099 4.3 MediumSeptember 13, 2011