A security vulnerability affecting both XOOPS and ImpressCMS has been reported  at the National Vulnerability Database and SecurityFocus. A fix for this has been posted at ImpressCMS. It is highly recommended you patch your sites to prevent exploitation of this vulnerability.