I'm working on a new release with updated OpenSSL. AFAIK, there's two ways to exploit the OpenSSL bug in the wallet:
1.) Using -rpcssl with a wallet daemon. This turns the RPC port into an SSL server which can be exploited. If the port is open to the internet, your wallet may be compromised.
2.) Opening payment protocol links which makes the wallet connect to an SSL server. If the server is malicious, your wallet may be compromised. So don't open any links starting with primecoin: .