A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 up to and including 2.2.26 legacy versions of the NCBI ToolBox.
nih ncbi toolbox