LISTSERV version 17 suffers from an insecure direct object reference vulnerability that allows illicit access to a target's profile. Continue reading...