EMS SQL Manager 3.6.2 (build 55333) for Oracle allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed.
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.