Joomla version 1.5.6 has been released and includes an important security update. Since a couple of the affected files are parts of com_user on which com_civiuser is based here is an immediate update to include these fixed files.

com_civiuser v0.2 SECURITY UPDATE

Please uninstall any previous version and install the fresh one. You will need to reset the parameters and menu links after reinstalling.