HP Palm webOS 1.4.5 and 1.4.5.1 does not properly restrict Plug-in Development Kit (PDK) applications, which allows local users to gain privileges by leveraging unintended filesystem write access.
https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02822174