"Cacti is a complete network graphing solution designed to harness the power of RRDTool's data storage and graphing functionality. Cacti provides a fast poller, advanced graph templating, multiple data acquisition methods, and user management features out of the box". Multiple vulnerabilities exist in Cacti software (XSS, SQL Injection, Path Disclosure, HTTP Response Splitting).

http://www.securiteam.com/unixfocus/5IP0A0UNGU.html