Fixed

• Observer NMS - SQL/command injection, directory traversal
• Novell GroupWise - directory traversal

Unpublished

• Keyoti RapidSpell - directory traversal