From the announcement: Multiple security vulnerabilities have been discovered in Cacti's web interface: * XSS vulnerabilities * Path disclosure vulnerabilities * SQL injection vulnerabilities * HTTP response splitting vulnerabilities http://marc.info/?l=cacti-announce&m=120278890903872
cacti-0.8.7b-1.fc8 has been submitted as an update for Fedora 8
*** This bug has been marked as a duplicate of 432758 ***
cacti-0.8.7b-1.fc8 has been pushed to the Fedora 8 stable repository. If problems still persist, please make note of it in this bug report.