I've fixed a security issue in the TWiki:Plugins.ToolTipPlugin. Any sites using this Plugin should upgrade to the newest version. If your site uses any topic or web view access restrictions, it's especially important to update. The exposure has existed going back at least a couple of years. TWikibug:Item6040 addresses the issue. The fixed plugin is version 17565 (02 Oct 2008) or later.