Lyris Listserver contains a vulnerability that allows access at any of the three levels of admin that Lyris allows.