Topic: Nu SOAP beware
Analysing the fa_soap_web_services.zip addon (AntERP - Lim Tee Chert), we see that tempuri.org is being the default namespace in line 7314 of api/lib/nusoap.php
The said domain is registered by Domainamania.com only in June 2012, by one Janis von Bleichert, Germany.
Please check all standard libraries for malicious URLs - some versions of nusoap v1.63 have malicious URLs with devious get parameters.