See SA-CONTRIB-2015-039 - Views - Multiple vulnerabilities
Changes since 6.x-2.16:
Changes since 6.x-3.0:
SA-CONTRIB-2015-046 - Taxonomy Tools - Cross Site Scripting (XSS)
See SA-CONTRIB-2015-040 - Webform prepopulate block - Cross Site Scripting (XSS)
SA-CONTRIB-2015-037 - Node Title disclosure on 403 Not Found page
See SA-CONTRIB-2015-035 - Ajax Timeline - Cross Site Scripting (XSS).