Steve Gibson on the SecurityNow podcast considers UPNP a horrible security vulnerability. The Conficker worm is a UPNP client, as a matter of fact. If your router has UPNP on, the worm can ask the router to open all the ports it wants and it will do so to the requesting software with no questions asked. Yow.