A security flaw involving unchecked HTML content. Recent versions have been patched and are no longer vulnerable.

An attacker with command over his own DNS service could gain root access if reverse DNS lookups are configured. Recent versions have been fixed.