Microsoft Excel 2016 version 1901 suffers from an XML external entity injection vulnerability.
Carlo Gavazzi SmartHouse 6.5.33 XSS / Cross Site Request Forgery
Carlo Gavazzi SmartHouse version 6.5.33 suffers from cross site request forgery along with both reflective and persistent cross site scripting vulnerabilities.