The Drupal Link module version 5.x-2.5 on Drupal 5.10 suffers from a cross site scripting vulnerability.
3e2442e480ab223cc24f6ee320ce3b85120926b9167e229e54754da3df85805f
The Drupal Imagefield module version 5.x-2.2 on Drupal 5.15 suffers file upload and cross site scripting vulnerabilities.
70b7ca51b0395989d6850139e7704f4d0741f5506342259ab3079931a19bdc6f