Latest SecurityFocus Newsletters from the PHP Security Consortium:
Alerts from SecurityFocus Newsletter #348 including:

[link] SF-Users Username HTML Injection Vulnerability
[link] JMK Picture Gallery Admin_Gallery.PHP3 Authentication Bypass Vulnerability
[link] TextFileBB Multiple Tag Script Injection Vulnerabilities
[link] Artmedic Event Index.PHP Remote File Include Vulnerability
[link] 4Images Multiple SQL Injection Vulnerabilities