We have received information on the Cisco IOS web server code injection/execution vulnerability. Enabling HTTP interface on Cisco IOS may not be such a good idea afterall. More details here

--------------------------------
Jason Lam  (isc.jason  / at /  gmail.com)