Hello,
Since we are using CVS with OpenACS, I just thought this might be of interest. There is a CERT advisory that's reporting a vulnerability in CVS. Worth looking at.
Cheers,
/B