CVE 2007-5837
GUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to execute arbitrary commands via shell metacharacters in a link element in a feed.
See the 
CVE page on Mitre.org
for more details.
