Some more vulnerabilities come to light in SCADA systems:
A Valentine's Day present for SCADA companies: new exploit tools (http://arstechnica.com/business/news/2012/02/a-valentines-day-present-for-scada-companies-new-exploit-tools.ars)
article courtesy of Ars.
A few are now added to Metasploit (the extensible vulnerability exploit framework) which makes testing (and exploiting) easier.