Apache OpenMeetings before 3.1.2 is vulnerable to Remote Code Execution via RMI deserialization attack.