Server can upload any file to client's home directory bypassing file sxtension limitations if Automatic Downalods function enable. Buffer overflow.
vulners.com/securityvulns/securityvulns:doc:13349