Make sure your MySQL connection isn't set up to use @% hostmasks. There was a pretty big exploit regarding that a few months back (that was patched in recent versions), and make sure you have a proper firewall installed for the MySQL server to prevent further exploits:
http://thehackernews.com/2012/06/cve...ous-mysql.html