Multiple unspecified vulnerabilities in eGroupWare before 1.4.004 have unspecified attack vectors and "grave" impact when the web server has write access to a directory under the web document root.
https://exchange.xforce.ibmcloud.com/vulnerabilities/42141
http://www.securityfocus.com/bid/28817
http://www.gentoo.org/security/en/glsa/glsa-200805-04.xml