Easy Transfer version 1.7 for iOS suffers from cross site scripting and directory traversal vulnerabilities.