There's an authenticated remote execution issue with an old unused script, netcmd.php.

You should either SVN up to have it automatically removed (we've not used it for a long time, but no one removed it!), or you can manually remove it if you're running CE.

Thanks,

adam.