Fix obvious security issues in HEAD before an alpha/beta - meta issue

Just spotted a bunch of SAs from March/April in the criticals queue which never got committed:

http://drupal.org/project/issues/search/drupal?text=&assigned=&submitted...