signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address.
https://exchange.xforce.ibmcloud.com/vulnerabilities/17093
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1725