Cvscop is a perl script that links into a CVS server through the hook files in CVSROOT. Cvscop can be configured to enforce policies such as limiting which users can move or delete cvs tags based on a regexp pattern match of the tag, etc..
There are no reported vulnerabilities