Updated Patches released for v2.1.4 and v2.2.3 - September 2016 (Updated)
Though they are both extremely old versions, with v2.1.4 no longer running on the maintained releases of PHP (v5.6 and v7.0), they were the release before a major version change and are/may still be in use. Please bear in mind we strongly recommend your installations be updated to a much newer version which contains many more fixes and new features. Having said that, these patches (v2.1.4patch11 and v2.2.3patch14) fix security vulnerabilities reported by Manuel Garcia Cardenas and PKAV TEAM which could allow possible SQL injections.
You can find the patches here.