CVE-2007-0346
SQL injection vulnerability in index.php in SmE FileMailer 1.21 allows remote attackers to execute arbitrary SQL commands via the us parameter.
Date published : 2007-01-17
http://www.attrition.org/pipermail/vim/2007-January/001244.html