Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid account name for the domain.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-1203
http://www.securityfocus.com/bid/3737