(please disregard my earlier comment. After some searching around, this is a well-documented security issue in WPMU – hacks abound.) Thanks for your plugins!