CVE-2007-3487
Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard (HP) Photo Digital Imaging allows remote attackers to create or overwrite arbitrary files via the argument to the saveXMLAsFile method.
Date published : 2007-06-29
http://www.securityfocus.com/archive/1/472384/100/0/threaded