I have some blogs that I'm upgrading to wordpress 2.5. One of them has a custom homepage set in options > reading. On this blog writing a wrong url in the address fields make all the pages defined in the blog to come up one after another. I don't have password-protected pages, but I think they're coming out also... The 404 template is not called.
Setting no custom homepage solves the problem, but please a fix is needed. Thanks.