security hole in gxine (and kaffeine) browser plugin