Unauthorized access is possible via ActiveX component under Windows.
CVE:
CVE-2008-0213 (Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms (HPVR) 6 and earlier allows remote attackers to execute arbitrary code via unknown vectors.)