CVE-2012-4553 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
Drupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-install Drupal and execute arbitrary PHP code via an external database server, related to "transient conditions."