My web host took down my account due to a WordPress administration script taking up all of the CPU. For some reason four copies of the
wp-admin/categories.php script were spinning pushing the load average above 20. It isn’t linked from any of the user scripts and there were no direct accesses in the access log, and I haven’t used WordPress since, well, the last post so it really is a mystery.
I’ve upgraded to 1.5.1 and added an Apache level password on the admin area as defensive measures.