Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nickname.
Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value.
The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registry key.