Evernote: Universal-XSS, theft of all cookies from all sites, and more Oversecured found dangerous vulnerabilities in the Evernote app for Android, which could have allowed access to user accounts to be intercepted by a hostile app installed on the same device. Some time ago,