Local File Inclusion in /file/show.cgi/
XSS (cross-site scripting) vulnerability in /uconfig.cgi/
XSS (cross-site scripting) vulnerability in /mailbox/list_addresses.cgi