security flaw

Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...

Source code leakage in JRun

Adding some sequences to request it's possible to obtain JSP source code...