Milton Webdav version 2.7.0.1 suffers from an XXE injection vulnerability.
46b29fcbd281a787022982aa5892c003ff7312833ef3f70e1d8febb584ffcc1a
Jackrabbit versions 2.x suffer from a WebDAV XXE injection vulnerability. Included are details and patches.
6408e65868c52858ab9e20f4d7de9fc89e4df4439e5fa505f752b7ed50030fc8