It's possible that users that uses Pizco were vulnerable to the same vulnerability that "Aurigma ImageUploader4.ocx" that found Elazar Broad. This post is this: http://www.securityfocus.com/bid/27539 The version of ImageUploader4 is 4.1.36.0 And I say that it's possible because I find a site where I download it, but I don't saw where the Activex control is used. Web with the vulnerable control: http://cdnimg.piczo.com/images/uploader/piczo_fast_uploader.cab
