[HECnet] Security hole in CSWS