See CiviCRM private report - Moderately Critical - Cross Site Request Forgery (CSRF) - SA-CONTRIB-2015-094
See Ubercart Webform Checkout Pane - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-087
This version addresses the security issues mentioned in SA-CONTRIB-2015-65. See #2446157: SA-CONTRIB-2015-065 - Fix