Thanks to Ilguiz Latypov, an XSS security weakness was detected in the iflateng.htm and ipopeng.htm files. We have fixed it in the latest release. But if you installed CalendarXP products before, please ensure to overwrite them with the version 10.0.1 or newer. Details can be found here: https://nvd.nist.gov/vuln/detail/CVE-2017-9072

Exxon Mobil, Cisco Systems, Oracle, eBay, Philips, Lockheed Martin, Siemens Medical Solutions, Toyota, GM, GE, Walt Disney Co, EMC, Zurich Insurance, Apollo Group, ABN AMRO Bank, Hotels.de, Hotels.com, British American Tobacco, Pfizer, ConsumerGuide.com, Verizon Wireless, ScotiaBank, Honeywell, Starwood Hotels & Resorts, Dow Jones & Co, iTravel2000, Kayak.com, Flight Centre Ltd, Manulife Financial, Fitch Risk Management, Renault F1 Team Ltd, Cirrus Logic, Hewlett Packard, Tucows, Deloitte & Touche, Iceland Air, The New York Times, BearingPoint, New York Post, Resturant Management Co, Telecom NZ Ltd, STA Travel, State Auto Insurance, and many more.