Open-Source CVS Project Plugs Security Leaks