This has been fixed as of February 14, 2007. I would have prefered to be notified directly (my email address was on the webpage in question) rather than having to peruse bugtraq to find this problem.