Collectively named ’21Nails,’ the security flaws include 11 vulnerabilities that require local access to an Exim server and 10 other weaknesses that could be exploited remotely.