Vulnerabilities were found in Trend Micro Email Encryption Gateway web console. The vulnerabilities were discovered and researched by Leandro Barragan and Maximiliano Vidal from Core Security Consulting Services. Vulnerable vulnerabilities include cross-site request request forgery (777), XML entity injection (767), Cross-Site Request Forgery (CWE-306), Improper Restriction of XML External Entity Reference, Improper Neutralization of input During Web Page Generation (‘Cross-site Scripting’) and missing authentication for Critical Function.”]