According to OSVDB, ~> 1.5.5 and ~> 1.6.8 fixed the vulnerability.

* See Solution: http://direct.osvdb.org/show/osvdb/90074