Pantomime in Ecartis 1.0.0 snapshot 20050909 stores e-mail attachments in a publicly accessible directory, which may allow remote attackers to upload arbitrary files.
https://exchange.xforce.ibmcloud.com/vulnerabilities/24220
http://www.vupen.com/english/advisories/2006/0260
http://www.securityfocus.com/bid/16317
http://secunia.com/advisories/18524