Because I get about 5 requests per week for it, here it is. Enjoy.
THIS is the one, the only, HP's fantastic SWFScan Adobe Flash de-compile tool and basic 'security scanner' ... use it for the betterment of humanity, and not for evil.
Also, if you find some really funny bugs such as the following, feel obligated to post them here as comments (anonymously, of course, to protect the guilty):
- hardcoded username/password strings
- hardcoded encyption keys
- hardcoded database connection strings
- "hidden" URLs