See Keyword Research - Moderately Critical - Cross Site Request Forgery (CSRF) - DRUPAL-SA-CONTRIB-2015-098
#622782: Text for custom theme says "Enter the numbers you hear" #1168740: Disable 3rd-party cookies in reCAPTCHA
See Invoice - Moderately Critical - Multiple vulnerabilities - SA-CONTRIB-2015-085
#2472607: Fails to install civicrm 4.6.1 and up (No such file or directory civicrm.php:43) #2411137: Drush 7 compatibility