Drupal versions 6.22 and below suffer from brute forcing and cross site scripting vulnerabilities.
Source: Drupal 6.22 Cross Site Scripting
Drupal versions 6.22 and below suffer from brute forcing and cross site scripting vulnerabilities.
Source: Drupal 6.22 Cross Site Scripting