IPFire has multiple vulnerabilities

IPFire is a free Linux-based firewall. Cross-site scripting and remote code execution vulnerabilities exist in versions of IPFire prior to 2.17. An attacker could exploit these vulnerabilities to steal cookie-based authentication or execute arbitrary commands in an affected application...