A security update has been posted to fix a potential cross-site scripting vulnerability in Flex SDK 3.3 or earlier.
Have you found any of the hidden goodies on the MAX 2009 homepage? Try clicking between areas, above and below parts of the screen. I am aware of 3 Flash based interactions that you might not have seen initially. And there may be more, too!