It was possible to manipulate cookies into showing the summaries of public bugs in a private project, in view_all_bug_page.php. I copied over the code from 0.17.4, which fixes this.

git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1232 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9