UI-Dialog 1.09 and earlier allows remote attackers to execute arbitrary commands.
https://security-tracker.debian.org/tracker/CVE-2008-7315/
https://rt.cpan.org/Public/Bug/Display.html?id=107364
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496448