Powerprove

An application may be able to access user-sensitive data due to improper handling of symlinks (symbolic links), which are files that point to another file or directory on the system.

The issue allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Special characters in the `filename` parameter can bypass the code signing check function.

The issue allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within nsz archive. This is due to a problem in the nsGreen.dll component.