Atrium Mercur Mail Server 3.2 allows local malicious users to read other user's email and create arbitrary files via a dot dot (..) attack.
atrium software mercur mailserver 3.2