AWStats Totals Cross-site Scripting and PHP Code Execution

Emory University has reported some vulnerabilities in AWStats Totals, which can be exploited by malicious people to conduct cross-site scripting attacks or to compromise a vulnerable system.
Be sure to check if your system is missing security updates or have insecure applications installed:http://secunia.com/software_inspector/