A security fix for MCMS 2001 and 2002 has been released this week.
It is mandatory to install this fix on all production machines to fix a known security hole which exists in all edition of MCMS.
Be aware that the MCMS 2002 version of this fix can only be installed on SP2. As older service pack levels are no longer supported the fix has only been released for the supported service pack levels.
In order to ensure that your MCMS 2002 machine is no longer vulnerable you have to ensure that MCMS 2002 SP2 is installed and after this the security fix MS07-018.