Directory traversal vulnerability in Cybozu Collaborex AG before 1.2(1.5) AG Pocket before 5.2(0.8) Mailwise before 3.0(0.3) and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors.