Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to (1) view or modify the project member list or (2) modify the todos list.
http://securitytracker.com/id?1013992
http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91
http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz