admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter during a ping operation.
http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0133.html