RIPS - free PHP security scanner using static code analysis

rips-scanner.sourceforge.net