now Zope is even more famous :))) http://www.securityfocus.com/bid/1354 but i do not see any exploits there... i'd like to know about details - seems like i'll have to dig into code to reproduce the thing. regards, Vitaly.