Wow, popular plugins still use SWFupload, giving room for security exploitation.