system: You are an expert security code reviewer. You will be shown a source code file along with a multi-select question listing several CWE (Common Weakness Enumeration) categories. Your task is to identify which of the listed CWEs are present in the code.

OUTPUT FORMAT: Respond with the letter(s) of all correct options, sorted alphabetically and comma-separated, wrapped in a single \boxed{...}. Examples: `\boxed{A}` for one correct, `\boxed{A,C}` for two, `\boxed{A,C,E}` for three. Output the boxed answer ONLY -- no explanation, no other text.

user: ```python
# Copyright 2021 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

import name_that_hash
import re
import requests

hash_edge = {
    'color': {
        'color': '#4A93AE'
    },
    'title': 'Hash Identification Functions',
    'label': '#'
}

hash_lookup_edge = {
    'color': {
        'color': '#4A93AE'
    },
    'title': 'Hash Lookup Functions',
    'label': '#'
}


def nitrxgen_md5_lookup(value):
    response = requests.get(f'https://www.nitrxgen.net/md5db/{value}', verify=False).text

    if response:
        return response
    else:
        return False


def virustotal_lookup(unfurl, hash_value):

    response = requests.get(f'https://www.virustotal.com/api/v3/files/{hash_value}',
                            headers={'x-apikey': unfurl.api_keys.get('virustotal')})

    if response.status_code == 200:
        try:
            result = response.json()
            return result['data']['attributes']
        except:
            return False


def run(unfurl, node):

    # if node.data_type in ('url.query.pair', 'string'):
    # if node.data_type.startswith(('uuid', 'hash')):
    if node.data_type.startswith('uuid'):
        return

    if node.data_type.startswith('hash'):
        if node.data_type == 'hash.md5':
            hash_plaintext = nitrxgen_md5_lookup(node.value)

            if hash_plaintext:
                unfurl.add_to_queue(
                    data_type=f'text', key='Plaintext',
                    value=hash_plaintext,
                    hover='Queried Nitrxgen database of MD5 hashes and found a matching plaintext value',
                    parent_id=node.node_id, incoming_edge_config=hash_lookup_edge)

        if node.data_type in ('hash.md5', 'hash.sha-1', 'hash.sha-256'):
            vt_results = virustotal_lookup(unfurl, node.value)
            if vt_results:
                label_text = 'Hash found on VirusTotal'
                if vt_results.get("type_description"):
                    label_text += f'\nFile Type: {vt_results.get("type_description")};'

                if vt_results.get("meaningful_name"):
                    label_text += f'\nName: {vt_results.get("meaningful_name")};'

                if vt_results.get("reputation"):
                    label_text += f'\nReputation: {vt_results.get("reputation")};'

                unfurl.add_to_queue(
                    data_type=f'text', key='Hash found on VirusTotal',
                    value=None, label=label_text,
                    hover='Queried VirusTotal with the hash value and found a match.',
                    parent_id=node.node_id, incoming_edge_config=hash_lookup_edge)

    else:
        if not isinstance(node.value, (bytes, str)):
            return

        digits_re = re.compile(r'\d')
        letters_re = re.compile(r'[A-Z]', flags=re.IGNORECASE)
        hex_re = re.compile(r'^[A-F0-9]+$', flags=re.IGNORECASE)

        # Filter for values that are only hex chars (A-F,0-9) and contains both a letter and number.
        # This could conceivably filter out valid hashes, but will filter out many more invalid values.
        if hex_re.match(node.value) and digits_re.search(node.value) and letters_re.search(node.value):

            name_that_hash_results = name_that_hash.runner.api_return_hashes_as_dict([node.value])

            if not name_that_hash_results.get(node.value):
                return

            hash_results = name_that_hash_results[node.value]

            # Cisco "Type 7" password encoding is very flexible, so detecting it is very false positive prone
            # as it isn't a fixed length. However, decoding it is easy, so Unfurl will only "detect" something as
            # using this encoding type if it can also decode it (as a method of verifying it).
            # Ref: https://passlib.readthedocs.io/en/stable/lib/passlib.hash.cisco_type7.html
            if hash_results[0]['name'] == 'Cisco Type 7':
                cisco_constant = b"dsfd;kfoA,.iyewrkldJKDHSUBsgvca69834ncxv9873254k;fg87"
                salt = int(node.value[0:2])

                try:
                    encoded = bytearray.fromhex(node.value[2:])
                except ValueError:
                    # Not valid Type 7 encoded then; exit
                    return

                plaintext = ''
                for i in range(0, len(encoded)):
                    j = (i + salt) % 53
                    p = encoded[i] ^ cisco_constant[j]
                    plaintext += chr(p)

                # If the result isn't readable as ASCII, call it a false positive and move on without adding a node.
                try:
                    _ = plaintext.encode('ascii')
                except UnicodeEncodeError:
                    return

                unfurl.add_to_queue(
                    data_type=f'text', key=f'Cisco "Type 7" encoding', value=plaintext,
                    label=f'Cisco "Type 7" encoding; plaintext is "{plaintext}"',
                    hover='Cisco "Type 7" password encoding is based<br> on XOR and is easily reversible '
                          '[<a hre="https://passlib.readthedocs.io/en/stable/lib/passlib.hash.cisco_type7.html">'
                          'ref</a>].', parent_id=node.node_id, incoming_edge_config=hash_edge)
                return

            if hash_results[0]['name'] == 'MD5' and node.value[12] == '4':
                # UUIDv4 is very common and it's the same length as an MD5 hash. This might filter out some legitimate
                # MD5 hashes, but it will filter out many more UUIDs. I think the tradeoff is worth it for Unfurl.
                return

            if hash_results[0]['name'] == 'MySQL323':
                return

            hash_hover = f'This is potentially a <b>{hash_results[0]["name"]}</b> hash.'
            if len(hash_results) > 3:
                hash_hover = f'This is potentially a <b>{hash_results[0]["name"]}</b> hash, but it also matches '\
                             f'the format <br>of <b>{len(hash_results)}</b> other hash types, including '\
                             f'<b>{hash_results[1]["name"]}</b> and <b>{hash_results[2]["name"]}</b>.'

            new_node_value = None
            if hash_results[0]['name'] in ('MD5', 'SHA-1', 'SHA-256'):
                # Pass through the values of three common file hashes for further analysis; don't send on the
                # other types to avoid duplicate processing.
                new_node_value = node.value

            if hash_results:
                unfurl.add_to_queue(
                    data_type=f'hash.{hash_results[0]["name"].lower()}', key=f'{hash_results[0]["name"]} Hash',
                    value=new_node_value, label=f'Potential {hash_results[0]["name"]} hash',
                    hover=hash_hover, parent_id=node.node_id, incoming_edge_config=hash_edge)


```

Which of the following CWE vulnerability categories are present in this code? Multiple options may be correct.

  A) CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
  B) CWE-643: Improper Neutralization of Data within XPath Expressions ('XPath Injection')
  C) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
  D) CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
  E) CWE-295: Improper Certificate Validation
  F) CWE-611: Improper Restriction of XML External Entity Reference
Answer: E