Drupal Permissions Privileges and Access Controls Vulnerability - CVE-2012-5651
Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users which might allow remote attackers to obtain sensitive information by reading the search results.