The Sybase PowerDynamo personal web server allows malicious users to read arbitrary files through a .. (dot dot) attack.
sybase powerdynamo 3.0.652