Castle Rock Computing SNMPc prior to 2015-12-17 has SQL injection via the sc parameter.
castlerock snmpc 9.0
castlerock snmpc 12.1