Windowmaker : Security Vulnerabilities, CVEs, Published In 1999

Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.

wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.

Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary commands by executing WindowMaker with a long program name (argv[0]).