Quest DR Series Disk Backup software version prior to 4.0.3.1 allows command injection (issue 40 of 46).
quest disk backup