RSform! 1.0.5
Multiple vulnerabilities – LFI, SQLi 061110 developer announcement of security releaseto 1.0.6 091110
J!Dump v1.1.2
LFI in J!Dump v1.1.2 and before 060111 The extension is fixed in version 1.1.3 070111
ccinvoices
SQLi for ccinvoices 051110 Developer Upgrade release to ccInvoices_110RC3 061110
xmovie 1.0
xmovie 1.0 LFi 010111
sponsorwall
SQL injection pulseextensions.com 011110
akeebabackup admin tools
xss 181210 http://www.akeebabackup.com/home/item/929-security-release-admin-tools-1-1.html devs update statement
Flip wall
SQL injection pulseextensions.com 011110
aicontactsafe
XSS for versions 2.0.13 and below 161210 dev release 2.0.14
K2 joomlaworks
http://getk2.org/ k2 xss version 2.4.1
JRadio
JRadio LFI/SID 161210 http://www.fxwebdesign.nl/index.php?option=com_content&view=article&id=20&Itemid=56 developer fix statement