Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensitive information via unspecified attack vectors, related to "two file exposure bugs."
http://www.vupen.com/english/advisories/2006/3250
http://www.securityfocus.com/bid/19453
http://www.debian.org/security/2006/dsa-1148
http://secunia.com/advisories/21502