Quite a few people rely on our Paypal DPM module for X-cart Classic. It's only second popular to our Authorize.net DPM/Accept.js method.
If you are a paypal user and still on X-cart classic this can help you get out of the harder PCI scope.
https://www.bcsengineering.com/store/paypal-dpm-for-x-cart.html
Carrie