Usage of mailx as a mailer allows command insertion into mail body.
vulners.com/securityvulns/securityvulns:doc:3719