The DTML implementation in the Z Object Publishing Environment (Zope) allows remote malicious users to conduct unauthorized activities.
zope zope 1.10.3
zope zope 2.1.1