Zenbership 107 Cross Site Request Forgery / Cross Site Scripting

Zenbership version 1.07 suffers from cross site request forgery, and cross site scripting vulnerabilities.