SecureCRT v4.1 and below contains a remotely exploitable command execution vulnerability. Patch available here.