Remote Buffer Overflow
- An attacker with command over his own DNS service could gain root access if reverse DNS lookups are configured. Recent versions have been fixed.
- http://www.securityfocus.com/archive/1/267551

Cross-site Scripting Flaw
- A security flaw involving unchecked HTML content. Recent versions have been patched and are no longer vulnerable.
- http://lwn.net/2001/1108/a/webalizer.php3