Security researchers have uncovered a pair of vulnerabilities in VMware software, which is used to run multiple versions of an operating system on a single computer. One flaw affects a server version of the software, the other is found in desktop software.