HFS versions 1.5g through 2.3 suffer from username spoofing and log injection vulnerabilities.
5b3cbaf4dc12bfae2a139d34b04a6f0260e498eb9425aab233e032444fa1c0a7
Syhunt HFSHack version 1.0b is an exploit for various vulnerabilities found in HFS versions 1.5 through 2.3.
cf5241d98b767c660b1da691f06531bdf11802f7be9b965f8b6a271445f08f40