Ubiquiti AirVision Controller version 2.1.3 suffers from an overly permissive default crossdomain.xml file.