Index: wp-includes/formatting.php
--- wp-includes/formatting.php.orig	2007-04-13 01:19:16 +0200
+++ wp-includes/formatting.php	2007-05-17 09:47:52 +0200
@@ -78,7 +78,7 @@
 	$pee = preg_replace('!(</?' . $allblocks . '[^>]*>)\s*<br />!', "$1", $pee);
 	$pee = preg_replace('!<br />(\s*</?(?:p|li|div|dl|dd|dt|th|pre|td|ul|ol)[^>]*>)!', '$1', $pee);
 	if (strpos($pee, '<pre') !== false)
-		$pee = preg_replace('!(<pre.*?>)(.*?)</pre>!ise', " stripslashes('$1') .  stripslashes(clean_pre('$2'))  . '</pre>' ", $pee);
+ 		$pee = preg_replace('!(<pre.*?>)(.*?)</pre>!ise', " wp_kses_stripslashes('$1') . wp_kses_stripslashes(clean_pre('$2'))  . '</pre>' ", $pee);
 	$pee = preg_replace( "|\n</p>$|", '</p>', $pee );
 
 	return $pee;
Index: wp-login.php
--- wp-login.php.orig	2007-04-19 04:53:19 +0200
+++ wp-login.php	2007-05-17 09:20:19 +0200
@@ -114,7 +114,7 @@
 				// Now insert the new pass md5'd into the db
 				$wpdb->query("UPDATE $wpdb->users SET user_activation_key = '$key' WHERE user_login = '$user_login'");
 				$message = __('Someone has asked to reset the password for the following site and username.') . "\r\n\r\n";
-				$message .= get_option('siteurl') . "\r\n\r\n";
+				$message .= sprintf(__('Website:  %s'), get_option('siteurl')) . "\r\n";
 				$message .= sprintf(__('Username: %s'), $user_login) . "\r\n\r\n";
 				$message .= __('To reset your password visit the following address, otherwise just ignore this email and nothing will happen.') . "\r\n\r\n";
 				$message .= get_option('siteurl') . "/wp-login.php?action=rp&key=$key\r\n";
@@ -188,7 +188,7 @@
 	wp_cache_delete($user->user_login, 'userlogins');
 	$message  = sprintf(__('Username: %s'), $user->user_login) . "\r\n";
 	$message .= sprintf(__('Password: %s'), $new_pass) . "\r\n";
-	$message .= get_option('siteurl') . "/wp-login.php\r\n";
+	$message .= sprintf(__('Login:    %s'), get_option('siteurl') . "/wp-login.php") . "\r\n";
 
 	if (FALSE == wp_mail($user->user_email, sprintf(__('[%s] Your new password'), get_option('blogname')), $message)) {
 		die('<p>' . __('The e-mail could not be sent.') . "<br />\n" . __('Possible reason: your host may have disabled the mail() function...') . '</p>');
Index: wp-mail.php
--- wp-mail.php.orig	2007-05-05 04:51:20 +0200
+++ wp-mail.php	2007-05-17 09:20:19 +0200
@@ -142,7 +142,7 @@
 	$post_category = $post_categories;
 
 	// or maybe we should leave the choice to email drafts? propose a way
-	$post_status = 'publish';
+	$post_status = 'draft';
 
 	$post_data = compact('post_content','post_title','post_date','post_date_gmt','post_author','post_category', 'post_status');
 	$post_data = add_magic_quotes($post_data);
Index: xmlrpc.php
--- xmlrpc.php.orig	2007-05-11 23:40:15 +0200
+++ xmlrpc.php	2007-06-08 16:07:27 +0200
@@ -538,7 +538,7 @@
 		$username				= $args[1];
 		$password				= $args[2];
 		$category				= $args[3];
-		$max_results			= $args[4];
+		$max_results			= (int) $args[4];
 
 		if(!$this->login_pass_ok($username, $password)) {
 			return($this->error);