In case you missed the official X-Cart blog post, there have been a series of security patches released for X-Cart versions 4.0.x-4.7.1. If you have an active support subscription with Qualiteam, you can contact them to apply the patches. If you do not have an active support subscription, the patches can be obtained via the File Area of the X-Cart HelpDesk accounts.
As always, if you need any assistance in applying these patches, please contact us.