Fix a bug in netsparker import

Two things:

* ```cdata``` apparently gets called with arguments sometimes, so this adds *args to avoid an ArgumentError

* The full vuln state was not getting cleared out when a new vuln was found, so URLs were getting concatenated onto whatever the first one was, instead of replacing.