Quest DR Series Disk Backup software version prior to 4.0.3.1 allows command injection (issue 41 of 46).
quest disk backup