CVE:CVE-2007-1587
CNNVD:CNNVD-200703-532
Tim Soderstrom StatsDawg 0.92版本中的templates/config/mail.tpl允许远程攻击者通过对qshapeLocation参数中的程序名进行分类，运行任意程序。
solution:Upgrade tim_soderstrom statsdawg to a higher version than 0.92,and avoid the version 0.92