If you have secure checkout enabled (which I hope you do), viewing the Invoice page in secure mode will give you a 'This page displays both secure and insecure items, do you wish to proceed?'.
Also, if you could take a moment to add your X-Cart version to your signature that would be great...thanks!
