BMC Control M versions prior to 9.0.20.214 suffer from SQL injection, denial of service, and information leaks.