Critical: Highly criticalImpact: Unknown
Security Bypass
Cross Site Scripting
Manipulation of data
Exposure of sensitive information
Privilege escalation
DoS
System access
Where: From remote
Solution Status: Vendor Patch
Secunia Advisory: SA28161
Release Date: 2007-12-19
Hmmm, seems Secunia are as far behind as I am.