It's been around for 14 years, and at least one of the newly disclosed bugs, a path-traversal flaw now tracked as CVE ...