InfronTech's J2EE Web Application Server, WebTide v7.04 and below has a directory traversal vulnerability.