This one ticks all the boxes: Runs as root 
Claims security Unpopular product with few updates McAfee has taken six months to patch 10 critical vulnerabilities in its VirusScan Enterprise Linux client. And these were nasty bugs as when chained they resulted remote code execution as root.
Article Link: http://cyberparse.co.uk/2016/12/13/p0wnographer-finds-remote-code-exec-bug-in-mcafee-enterprise/