EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for init.emu.
https://exchange.xforce.ibmcloud.com/vulnerabilities/15453
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-2376
http://www.securityfocus.com/bid/9861