Was it related to magic quotes or global variables created from user input? If so, the writing has been on the wall for over a decade for these.