Red Hat Security Advisory: xen security update
HVM guest VNC server allows compromise of entire host OS by any VNC console user
cpe:/a:redhat:rhel_virtualization:5::client cpe:/a:redhat:rhel_virtualization:5::server cpe:/o:redhat:enterprise_linux:5::client cpe:/o:redhat:enterprise_linux:5::server