Fix SQL injection vulnerability in adm_config_report.php

Jakub Galczyk (HauntIT blog http://hauntit.blogspot.com/) reported this
issue, introduced by f8a81a33880752364ea47bdd9a987bff986c81de in
MantisBT 1.2.13.

Root cause is the use of unsanitized inlined query parameters.

Fixes #17055
Localisation updates from https://translatewiki.net.
Bump version, update credits and release notes for 1.2.17
Changed version to 1.2.18dev [skip ci]
Incorrect project-specific where clause

If user has access to only one project (or if there is only one project
in bug tracker), helper_project_specific_where() function returned an
incorrect where clause when $project_id == ALL_PROJECTS.

Fixes #17073
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Fixes #17076: Issue history show date submitted and last updated as integers rather than dates.
Fixes #17075: Import plugins should be able to set last_updated field to a date in the past.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.