Until I get more information (that can be verified) concerning reports of the newly discovered security flaws in third party components, here is a list of components with confirmed security risks (as of June 21, 2007).
While there are no known security risks with the current version of Joomla 1.0.13 there are older third party components that need to be removed or updated-
VULNERABLE EXTENSIONS LIST