webTareas up to and including 2.1 allows upload of the dangerous .exe and .shtml file types.
webtareas project webtareas