Muliple bugs, including remote buffers overflows. Client can delete any files from client machine on remote server's request.
vulners.com/securityvulns/securityvulns:doc:5185