The next version of cpCommerce has been released to 1) provide better Url Rewriting support for servers running apache in a Microsoft Windows environment and 2) to correct a security vulnerability that would give an attacker the ability to forcefully login as an administrator without entering the correct email address or password.

I highly recommend that everyone upgrade to this version to secure a site running 1.2.6.

You can download the new version at the downloads page

As always, there is a patch file located in each Zip file. If you have customizations, you can use a program like WinMerge to help merge the changes of 1.2.7 into your custom cpCommerce.