Hey

I tried to find a way to contact the main devs here privately, but couldn't find any email adresses or ways of sending personal messages, so here goes publically:
http://www.milw0rm.com/exploits/4823
http://www.milw0rm.com/exploits/9154
http://www.milw0rm.com/exploits/9166
If those are fixed, good. If not, i guess you should delete this post.

None of these state that they affect release 1.2.6.

Were they fixed since 1.2.5 and 1.1.3?

You are welcome to peruse the change log. http://www.zenphoto.org/trac/log/trunk