CVE-2009-4824
Unspecified vulnerability in Kolab Webclient before 1.2.0 in Kolab Server before 2.2.3 allows attackers to have an unspecified impact via vectors related to an "image upload form."
Date published : 2010-04-27
http://www.securityfocus.com/bid/37465
http://files.kolab.org/server/release/kolab-server-2.2.3/sources/release-notes.txt