7.5
CVSS
The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.
Severity: HIGH