Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. "ls C:".
AV:N/AC:L/Au:N/C:P/I:P/A:P
This vulnerability has a 4.40% probability of being exploited in the next 30 days, ranking higher than 91% of all scored CVEs.