The Drupal Taxonomy Image third party module version 6.x suffers from arbitrary php code execution and cross site scripting vulnerabilities.
12ae748ce2cecdafa67e4c738a012ec2cfdc7052744eee7152801289a0a379c4
ZipCart version 6.x suffers from an access bypass vulnerability.
0e9f709682d4ce2cc90cfcee885a9245af53e3bf08a6c86a5d9e2949587d7bc2