A family of collisions in MD5 has been found, and the "vultures are circling" (as Ed Felten put it) quite low above SHA-1. Bugger. Ah well, evolution at work I guess.
Link to Ed Felten's article