A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization.
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0013