Which problems? The only one I know of requires the attacker to know the exact media path on the local server, even if they figure that out all they gain is the ability to view that file.

Seriously though, if there is a bigger vulnerability out there, I’d love to know about it (the only one I found would allow unauthorized viewing).