Bacula-Web prior version 8.0.0 suffer several SQL injection and XSS vulnerabilities (see CVE-2017-15367 for more details). I would strongly recommend you to use at least Bacula-Web 8.0.1.
A big thanks to Gustavo Sorondo for his help to fix those security issues.
If you still want to take the risk and use a prior version (which I strongly not recommend), you can download a previous version from Bacula-Web project on Github.
Latest stable release
Support the project
Thanks for your contribution and support 🙂