In case anyone cares, I rebuilt php3 for potato i386, with the recent security patch[1] applied.
debs available at: http://www.math.ucsb.edu/~maher/debian Use at your own risk etc. This is just a stopgap till they get the official security update out. If they don't work let me know and I'll pull them. Joseph -- [1] http://www.php.net/distributions/mime.c.diff-3.0.gz