Just read Pete Finnigan’s Oracle security blog where he is pointing to the very interesting presentation Hacking and Hardening Oracle Express Edition done by Red Database Security at the UKOUG 2006.
Everybody who is deploying his APEX application on Oracle XE should read that!