Netsarang : Security Vulnerabilities, CVEs, CVSS score >= 7

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.

Xshell before 7.0.0.76 allows attackers to cause a crash by triggering rapid changes to the title bar.

NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an attacker controlled FTP server. That leads attacker to execute arbitrary code by sending a crafted filename.