Microsoft Visual Basic for Applications versions 6.5 through 7.1 suffer from a malicious hidden module issue.