The File Firewall prior to 2.8.0 for ownCloud Server does not properly enforce file-type restrictions for public shares.
owncloud file firewall