shoutcast -- cross-site scripting, information exposure

Goober’s advisory reports reports that shoutcast is vulnerable to an
arbitrary file reading vulnerability:

Impact of the vulnerability depends on the way the product was
installed. In general, the vulnerability allows the attacker to read
any file which can be read by the Shoutcast server process.