Amongg others there are bugs allowing file access on client computer.
vulners.com/securityvulns/securityvulns:doc:3470
vulners.com/securityvulns/securityvulns:doc:3506
vulners.com/securityvulns/securityvulns:doc:3525
vulners.com/securityvulns/securityvulns:doc:3730