Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2000-0317
http://www.securityfocus.com/bid/1144
http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0057.html