(via absoblogginlutely) Popfile made a security announcement yesterday.

Just under one hour ago one of POPFile"s developers reported to me that they had discovered a flaw in the way in which we handle the delivery of GIF/PNG/ICO/CSS/HTML files through the internal web browser.
The good news is that people using the default stealth mode configuration are NOT affected, the bad news is that we have found a security flaw (the last (and first!) one was in May 2003).

Nice to know that the developers designed their software to default to stealth mode.