The XML Service interface in Citrix XenApp 6.5 and 6.5 Feature Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/80627
http://www.securitytracker.com/id?1027868
http://www.securityfocus.com/bid/56907
http://support.citrix.com/article/CTX135066