Cacti the graphing tool has an security bug.
Heise.de has got an post about
it.
I think moving the
cmd.php is not a very good solution. I fixed it with the following code in the Apache config:
<Files cmd.php>
Order Deny,Allow
Deny From All
</Files>
It blocks all webrequests for the
cmd.php
(Don't forget to reload your Apache)