#2737 Security vulnerabilities announced

[Henri Salo]

Please see advisories in following URLs:

http://hyp3rlinx.altervista.org/advisories/WEBCALENDAR-V1.2.7-PHP-CODE-INJECTION.txt
http://hyp3rlinx.altervista.org/advisories/WEBCALENDAR-V1.2.7-CSRF-PROTECTION-BYPASS.txt

These should be fixed as soon as possible.