FileMaker Server uses Apache on OS X, and edits the configuration file ( /private/etc/apache2/httpd.conf ) and enables apache. This means that if one is running filemaker server, one is (usually) running apache. The new 'shellshock' bug would seem to be a concern in this situation.
I'm running a few OS X servers that have FM Server and Apache running. I've decided to stop apache this morning until I understand the risks.