ImgSvr is "a personal or corporate Embedded Picture Web Server that let's you efficiently browse digital pictures. Contrary to other gallery systems, imgsvr aimed to be an easy and fully dynamic picture server, no static created thumbnails are created." A directory traversal vulnerability can be exploited in ImgSvr through the usage of additional chars before the URI.

http://www.securiteam.com/windowsntf...C00M1FKKY.html