We'll soon release "Project Flashbang" - a tool to find all flashVars + eval sinks in SWF files