Backport of 62abb12..ed584c3 and 8910e51 from master

Fix XML processing in GetID3
Fix XML processing in PHPExcel
Fix XML processing in SabreDAV
Fix a security problem with SabreDAV
Fix XML processing in PHPDocx
Some missing PHPExcel patches
Mention external entity patches