A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution.