Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, which prints the contents of the $_SERVER superglobal.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-0405
http://www.waraxe.us/advisory-63.html
http://www.securityfocus.com/archive/1/486762/100/0/threaded