Kshout versions 2.x and 3.x allow for direct file access to their configuration files.
8c0896bc4a509cbcf7c2ba24fcda2dd282d65861445774e2bdc42115d9afe375
WordPress versions 1.5 and below suffer from cross site scripting and HTML injection flaws.
3433a49edfdcde377f8cd484bdefab345de693e557f2db876f62b8d64e187c62