I have been running zenphoto together with the zenpage plugin for my website for a few years now. It is constantly been updated and has a simple admin interface.

I installed this script just before Thanksgiving, It wasn't important, I just wanted to have a place to display retired splash screens. By Saturday I was compromised. The site was redirected, I was blocked by Google & most search engines. I ended up simply having hostmonster nuke the site. I'm still reloading it. Going to ZenPhoto and joining their forum was no help. After my first post all the main dudes started a witch hunt. It was my fault for downloading via my web host, rather from them. Which makes me believe they have a hack version as well as a good version. I no longer use the script, So unsure of what verification I can offer.