PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by leveraging console access and providing shell metacharacters in a "system ping" command.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-4831
http://www.coresecurity.com/advisories/pinapp-mail-secure-access-control-failure