User Account Control
The self-extracting packages created with IExpress have (inherent) vulnerabilities which allow arbitrary code execution because of the way they handle their installation command and their command line processing. Additionally, because of the way Windows User Account Control handles installers, these vulnerabilities allow a privilege escalation.