This is a serious one:

http://www.phpbb.com/phpBB/viewtopic.php?t=240513

It's already given me a major headache today. Trust me... the exploit works!

This went out to security lists a few days ago: http://secunia.com/advisories/13239/