1) Remote Dynamic DNS update is disabled and not used by ISPConfig.
2) The DOS problem is patched at least in debian.
http://www.frsirt.com/english/advisories/2007/4228
I can add a note to poeple who want to compile it manually to use mydns-ng intsead or use the sources from debian.