web/security: add forgotten CVE-2011-2161

Found-by: Andreas Cadhalpun <andreas.cadhalpun@googlemail.com>