Portcullis Security Advisory - Emotion MediaPartner Web Server versions 5.0 and 5.1 have a flaw where the source of a bhtml file can be displayed with a period or plus sign are added to the request.
55943bc26b57178fe615eee1793659d16450a87ea92cf01ae4f68b6e1a996da6