In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.