Security Apache Cordova Android File Transfer Plugin 1.2.1 Header Injection September 25, 2015 007admin Apache Cordova Android File Transfer plugin versions 1.2.1 and below suffer from an HTTP header injection vulnerability.