Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1972
http://www.securityfocus.com/bid/13933
http://securitytracker.com/id?1014178
http://securityresponse.symantec.com/avcenter/security/Content/2005.06.10.html