Flash FTP Server version 1.0 (and possibly 2.1) for Windows is susceptible to a directory traversal attack.