fix security issue in newsletterImportActive.vm and
newsletterImportInactive.vm