[Coldstuff] Advisory: Security hole with ColdCore

[xmath]

(to other admins: I've given the fix to "Vanish 1024" and "Jon" - 
just letting you know to avoid duplicate efforts)

  - xmath