The chances of hacking are far greater just by running the old 1.3.8 code than they are by having 777 folders, let alone files.

Simple answer: upgrade.