CVE-2006-7037: Mathsoft Mathcad

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Mathcad 12 through 13.1 allows local users to bypass the security features by directly accessing or editing the XML representation of the worksheet with a text editor or other program, which allows attackers to (1) bypass password protection by replacing the password field with a hash of a known password, (2) modify timestamps to avoid detection of modifications, (3) remove locks by removing the "is-locked" attribute, and (4) view locked data, which is stored in plaintext.

Affected products

• Mathsoft Mathcad: version 12 only; version 13 only; version 13.1 only

Published 2007-02-23. Last modified 2026-06-16.