CVE:CVE-2006-4955
CNNVD:CNNVD-200609-400
Neon WebMail for Java 5.08之前版本的downloadfile servlet中存在目录遍历漏洞，远程攻击者可以通过(1)savefolder和(2)savefilename参数（该参数中包含..）序列读取任意文件。
solution:Upgrade neosys neon_webmail to a higher version than 5.06,5.07,and avoid the version 5.06,5.07