Lofi42

The issue allows remote attackers to execute arbitrary code via a long Unicode property value in several parameters, including `serverAddress`, `sessionId`, `clientIPLower`, `clientIPHigher`, `userName`, `domainName`, or `dnsSuffix`.

The issue allows remote attackers to delete arbitrary files via a full pathname in the argument to the `FileDelete` method. This is due to an absolute path traversal vulnerability in the WebCacheCleaner ActiveX control.