As I posted in the English MyLittleHomepage forum...
Can we please start a private message board for people to post security issues? Something that only a few trusted members can access?
If someone posts a security issue on the public website, I think spammers are more likely to do something about it than users. Especially, for example, when it's as simple as a search revealing email addresses. We should not be broadcasting our vulnerabilities.
I envision a new contact form that feeds directly into the database of a private forum.