BugtraqID: 132-A hacker can send a trojan by sending a file with the name "picture.jpg.exe". It appears to the user as a JPG file, and when they click on it, it runs the program instead.
BugtraqID: 246-Describes a bug in the ICQ built-in webserver that isn't too severe.