Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, related to a "command injection vulnerability."
http://www.securityfocus.com/bid/56165
http://www.mutiny.com/releasehistory.php
http://www.kb.cert.org/vuls/id/841851