QuickBooks Desktop versions 2007 through 2016 suffers from SQL injection and code execution vulnerabilities.