Security vulnerabilities have been discovered in third-party TYPO3 extensions:
direct_mail_subscription, rgsmoothgallery, th_mailformplus, ameos_dragndropupload