The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.