/base/webmail/readmsg.php was detected. Some versions of this CGI allow remote users to read local files with the permission of the web server. Note that if the user has a shell access, this kind of attack is not interesting. *** OVS just checked the presence of this file *** but did not try to exploit the flaw.

get a newer software from Cobalt Reference : http://online.securityfocus.com/archive/1/195165