dotProject versions 2.0.1 and below are vulnerable to multiple arbitrary code execution and information disclosure problems.