Unspecified vulnerability in the Header Image Module before 5.x-1.1 for Drupal allows remote attackers to access the administration pages via unknown attack vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/40510
http://www.vupen.com/english/advisories/2008/0571
http://www.securityfocus.com/bid/27787