PHP mail function vulnerability

Net-Security: “php mail() function does not do check for escape shell commandes,
even if php is running in safe_mode.

So it may be possible to bypass the safe_mode restriction and
gain shell access.”