WordPress 2.5 has a vulnerability – undocumented, at this stage – with more information here
From the look of the files involved, it wouldn’t seem at this stage to affect WordPress 2.3.3 as such – 2 of these files don’t exist in that version (but this is only speculation, given limited info).
Here is the original:
WordPress version 2.5 – security fix
