Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, which prints the contents of the $_SERVER superglobal.
http://www.waraxe.us/advisory-63.html
http://www.securityfocus.com/archive/1/486762/100/0/threaded