Ohh :)
many of issues of this list not issues
6.1.4 have just replacements global $dir to constants, and passing input params from forms to make script more safe, not more

2. photo gallery (share), yes, visitors can`t perform any actions, need login

6. Promo, first, this is not flash, second, recheck also your media\images\promo\original\ folder

7. yes, impossible to put vote by visitors, and it was done many times ago, .. possible even for 6.1.0