NVD CVE-2017-5475 January 14, 2017 007admin comment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments.