Security Epicor Password Disclosure / Cross Site Scripting October 1, 2014 007admin Epicor suffers from cross site scripting and password disclosure vulnerabilities.