phpWhois allows remote malicious users to execute arbitrary code via a crafted whois record.
phpwhois project phpwhois