joffer Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure
remote multiple 10000.0 OSVDB-26772;CVE-2006-3392

joffer sNews - 'index.php' Multiple SQL Injections
webapps php CVE-2005-3853;OSVDB-21093

joffer sNews - Comment Body Cross-Site Scripting
webapps php CVE-2006-0715;OSVDB-23249