[Bug 664505] VUL-0: calibre: XSS and file disclosure