Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges.
https://exchange.xforce.ibmcloud.com/vulnerabilities/16301
http://www.securityfocus.com/bid/10451
http://www.debian.org/security/2004/dsa-512