Mako Web Server suffers from file disclosure, remote command execution, and server-side request forgery vulnerabilities.