The Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2012-3952
http://magazine.cybozulive.com/2012/08/291200.html