Plone 2.5 Password Reset Tool Vulnerability
Plone 2.5 and 2.5.1RC are both vulnerable to a security problem with versions 0.4 and earlier of PasswordResetTool. If you have separately installed a vulnerable version of PasswordResetTool this also affects you. Please update to the latest version immediately. If you need help, please file a ticket. More information: Plone Security Advisory: Password Reset Tool.