CVE-2016-1000282
Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection.
Date published : 2019-02-05
https://github.com/outflanknl/Exploits/blob/master/harakiri-CVE-2016-1000282.py