i'm using XOOPS 2.0.7.1, but still they can defaced..
DEFACEMENT DETAILS Date/time: 2004/08/23 13:25 Defacer: 7Crews Domain:http://portal.xoopsmalaysia.org Mirror: Display mirror IP address: 203.81.38.130 System: Linux Web server: Attack method: Extra information: mass defacement