TimThumb issues

I’m interested in this plugin but is there awareness around the exploitability of timthumb?

Also, anybody use this before? http://wordpress.org/plugins/timthumb-vulnerability-scanner/

http://wordpress.org/plugins/user-avatar/