It's possible to script on local securty zone if FTP folder presentation is enabled.
vulners.com/securityvulns/securityvulns:doc:3049
vulners.com/securityvulns/securityvulns:doc:3398
vulners.com/securityvulns/securityvulns:doc:3399