Taran mentions that there's a security issue with Drupal conmments. Just to let everyone know, the comment exploit has already been documented and fixed with the Drupal 4.6.2 release (which this site is running). And drupal.org is down for the moment due to a maintenance issue at the computing center where the Drupal server is hosted.

Those that want to pick up the 4.6.2 release before drupal.org is back online will find links to download mirrors and information on the latest security issues at Ber's site, webschuur.com.