>>Found this interesting XML attack against Python:
>>https://pypi.python.org/pypi/defusedxml
>>
>>Curious if VFP's native XML functions have any vulnerabilities?
>
>VFP ships with MDAC 2.6. Any MDAC before 2.8 is subject to a host of vulnerabilities: http://technet.microsoft.com/en-us/security/bulletin/ms06-014
>
>Hank

Out of curiosity I downloaded and installed the Microsoft Component Checker which will verify your MDAC version. When I ran the program it gave me this message:

Component Checker is not supported on Windows Vista and later
Windows OS's, since MDAC files are protected on these platforms.

Wasn't sure if you knew this or not.