The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 allows remote authenticated users to cause a denial of service (resource exhaustion) via a large number of active sessions, which exceeds ICP's maximum.
http://www.niscc.gov.uk/niscc/docs/re-20050228-00178.pdf?lang=en