Apache Qpid's qpidd versions 0.30 and below can be induced to make HTTP requests.
02b8f6b5094a9d7d10965cd7f7bba8617ecef190936e5c0be10efc070b74f3ed
Another WordPress Classifieds plugin suffers from cross site scripting and remote SQL injection vulnerabilities.
8e3cc50618209d35d2db5cfcfaea563a32e2c93be193dbca495188aee7164dae