WPKontakt versions 3.0.1 and below suffer from a parsing error that allows for remote script execution.