Directory traversal during .wmz files download allows to uploading any file to any location.
vulners.com/securityvulns/securityvulns:doc:4491
vulners.com/securityvulns/securityvulns:doc:4496
vulners.com/securityvulns/securityvulns:doc:4501