Cisco Security Advisory – Certain Cisco Unified IP Conference Station and IP Phone devices contain vulnerabilities which may allow unauthorized users to gain administrative access to vulnerable devices.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/54619/cisco-sa-20070221-phone.txt
Source: https://packetstormsecurity.com/files/54619/Cisco-Security-Advisory-20070221-phone.html