Security fix for MCMS 2001 and 2002 has been released (Microsoft Security Bulletin MS07-018)
Microsoft release a security update for MCMS 2001 and 2002, This update resolves two newly discovered, privately reported vulnerabilities. Each vulnerability is documented in the "Vulnerability Details" section of this bulletin.
The 2 problems are
1 - CMS Memory Corruption Vulnerability
2 - CMS Cross-Site Scripting and Spoofing Vulnerability