IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing . (dot).
https://exchange.xforce.ibmcloud.com/vulnerabilities/19760
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-0838
http://www.securityfocus.com/bid/12849
http://www.securityfocus.com/archive/1/393705