An interesting read (dated yesterday April 23, 2017):
http://karmainsecurity.com/tales-of-sugarcrm-security-horrors
SuiteCRM is mentioned positively, though the depth of issues with SugarCRM is unnerving.
Front page discussion on Hacker News:
It seems this discussion is going to be happening on this thread
https://suitecrm.com/forum/suitecrm-7-0-discussion/13955-security-issues