The Java and Python runtimes fail to properly validate FTP URLs, which can potentially allow attackers to punch holes through firewalls to access local networks.

Transmit can even do server-to-server transfers from one server's tab to another's. Despite its $30 price tag, Transmit has even got some Windows users wishing for their own version. Best FTP Clients?