OwnCloud has pretty regular discoveries of SQL injection and RCE vulnerabilities. http://owncloud.org/about/security/advisories/ http://owncloud.org/about/secu

OwnCloud has pretty regular discoveries of SQL injection and RCE vulnerabilities. http://owncloud.org/about/security/advisories/ http://owncloud.org/about/security/advisories/ I'll say to their credit that at least they're serious enough to publish security advisories. Some of these errors just shouldn't be possible in a well written code base, though. I would never run OwnCloud on my own servers, or use it to store anything remotely sensitive.