SerWeb versions 2.0.0 dev1 2007-02-20 and below suffer from multiple remote and local file inclusion vulnerabilities.