Plone versions 2.5 up to and including 2.5.4 and versions 3.0 up to and including 3.0.2 suffer from an arbitrary python code execution vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/60734/plone-exec.txt
Source: https://packetstormsecurity.com/files/60734/plone-exec.txt.html