The management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "code injection issue."
https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-0572
http://www.securityfocus.com/bid/49742