A group of Stanford researchers have discovered 99 vulnerabilities when auditing e107 version 0.7, myBloggie version 2.1.3beta, utopia NewPro version 1.1.4, DCP Portal version 6.1.1, and PHP Webthings version 1.4. They have not released exploitation information, however.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/42273/php-stanford.txt
Source: https://packetstormsecurity.com/files/42273/php-stanford.txt.html

