PowerChute plus 5.0.2 creates a "Pwrchute" directory during installation that is shared and world writeable, which could allow remote attackers to modify or create files in that directory.
http://www.securityfocus.com/bid/5069
http://www.security.nnov.ru/news2064.html