Clearswift MAILsweeper prior to 4.3.15 does not properly detect and filter RAR 3.20 encoded files, which allows remote malicious users to bypass intended policy.
clearswift mailsweeper