Xerces vulnerable to CVE-2009-2625