--- src/report.c.str	2010-02-18 16:59:38.000000000 +0100
+++ src/report.c	2010-02-18 17:00:12.000000000 +0100
@@ -201,7 +201,7 @@
 	memset(css_buffer, '\0', sizeof(css_buffer));
 	while(fgets(css_buffer, sizeof(css_buffer) - 1, css_file))
 	{
-		fprintf(stdout, css_buffer);
+		fprintf(stdout, "%s", css_buffer);
 		memset(css_buffer, '\0', sizeof(css_buffer));
 	}
 	fclose(css_file);
@@ -402,7 +402,7 @@
 	memset(css_buffer, '\0', sizeof(css_buffer));
 	while(fgets(css_buffer, sizeof(css_buffer) - 1, css_file))
 	{
-		fprintf(stdout, css_buffer);
+		fprintf(stdout, "%s", css_buffer);
 		memset(css_buffer, '\0', sizeof(css_buffer));
 	}
 	fclose(css_file);
--- src/shell.c.str	2010-02-18 16:58:48.000000000 +0100
+++ src/shell.c	2010-02-18 16:59:22.000000000 +0100
@@ -358,7 +358,7 @@
     output_c_string(p->out, z);
   }
   if( bSep ){
-    fprintf(p->out, p->separator);
+    fprintf(p->out, "%s", p->separator);
   }
 }
 
@@ -1018,7 +1018,7 @@
   }else
 
   if( c=='h' && strncmp(azArg[0], "help", n)==0 ){
-    fprintf(stderr,zHelp);
+    fprintf(stderr,"%s",zHelp);
   }else
 
   if( c=='i' && strncmp(azArg[0], "import", n)==0 && nArg>=3 ){