CVE-2001-0021
MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template parameter.
Date published : 2001-05-07
http://www.securityfocus.com/bid/2063
http://archives.neohapsis.com/archives/bugtraq/2000-12/0057.html