Security Epicor Password Disclosure / Cross Site Scripting October 1, 2014 007admin Leave a comment Epicor suffers from cross site scripting and password disclosure vulnerabilities.