Magento Server MAGMI Cross Site Scripting / Local File Inclusion

Magento Server MAGMI suffers from cross site scripting and local file inclusion vulnerabilities.