Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature.
http://www.securityfocus.com/bid/13933
http://securitytracker.com/id?1014178
http://securityresponse.symantec.com/avcenter/security/Content/2005.06.10.html