HP has acknowledged some vulnerabilities in HP OfO (Oracle for Openview). Some of these have unknown impacts, while others can be exploited to bypass certain security restrictions and conduct SQL injection attacks, cause a DoS (Denial of Service), and potentially compromise a vulnerable system.

For more information:
SA26114

The vulnerabilities are reported in Oracle for OpenView (OfO) v8.1.7 or v9.1.01 or v9.2 running on HP-UX, Tru64 UNIX, Linux, Solaris, and Windows.

Solution
Install the Critical Patch Update - July 2007.
Original Advisory
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00727143

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers