Secunia Security Advisory – Ken Girrard has reported a vulnerability in Open WebMail, which can be exploited by malicious users to execute arbitrary application. The vulnerability is caused due to the vacation.pl script opening list files without checking their existence.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33736/sa12017.txt
Source: https://packetstormsecurity.com/files/33736/Secunia-Security-Advisory-12017.html