I just received an email from google regarding potential phishing on my site. Below is the pertinent text:

"Dear site owner or webmaster of dropthecow.com,

We recently discovered that some pages on your site look like a possible phishing attack, in which users are encouraged to give up sensitive information such as login credentials or banking information. We have removed the suspicious URLs from Google.com search results and have begun showing a warning page to users who visit these URLs in certain browsers that receive anti-phishing data from Google.

Below are one or more example URLs on your site which may be part of a phishing attack:

http://www.dropthecow .com/~chinal6/css/aipal/secure-code2/home/1a59a89cfb44d40d20ae642b7e4f25ed/

We strongly encourage you to investigate this immediately to protect users who are being directed to a suspected phishing attack being hosted on your web site. Although some sites intentionally host such attacks, in many cases the webmaster is unaware because:

1) the site was compromised
2) the site doesn't monitor for malicious user-contributed content"

And so forth. I found this page stating it may be an Apache mod_userdir vulnerability: http://drupal.org/node/1087782

Can you please advise as to whether there is something I need to do to rectify this situation, or if it is indeed a concern?

Thanks!