Unspecified vulnerability in the Publish XP module Menalto Gallery before 2.2.4 allows attackers to create albums and upload files via unknown vectors.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-6649
http://security.gentoo.org/glsa/glsa-200802-04.xml
http://secunia.com/advisories/28898