I was looking through my awstats stats when I noticed /common/noframes in my logs. Then when I access that page I can see the left frame navigation.
Now this wouldn't be a particularly big concern except I'm accessing this through a domain name on the site. That means the server manager navigation area is exposed to the web. Granted, you get forbidden messages when you try to access the links, but the links are there. I was under the impression that the server manager wasn't accessible from the web.
I read elsewhere that a vacation autoresponder caused something like this, but I don't have it installed. I have Spamassassin, ClamAV, Crontab manager, vpn, Port Manager and of course awstats. SME 6.0.1
Suggestions?