CGIscript.net csMailto.cgi program allows remote malicious users to read arbitrary files by specifying the target filename in the form-attachment field.
cgiscript.net csmailto