CVE-2007-2619: Symantec Pcanywhere

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows local administrators to obtain the credentials by reading process memory, a different vulnerability than CVE-2006-3785.

Affected products

• Symantec Pcanywhere: version 11.5 only; version 11.5.1 only; version 12.0 only

Published 2007-05-11. Last modified 2026-06-16.