The firm described the holes as "highly critical", meaning that systems could be compromised if crooks dive in.
Secunia said the potential holes are in version 10.4.6, but other versions might be affected too.
Until the holes are filled in, don't visit untrusted web sites, or open ZIP archives or images which come flying your way and that look a tad dodgy.