A form that uses a CGI script to send information to another user can be manipulated to mail the password file of the server to a malicious user or to delete all the files on the system.