There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.Referenceshttps://support.citrix.com/article/CTX234879http://packetstormsecurity.com/files/156037/Citrix-XenMobile-Server-10.8-XML-Injection.html