Oops!
Luckily I had a feeling that host shared folders was a bad idea…
From VMware:
“On Windows hosts, if you have configured a VMware host-to-guest shared folder, it is possible for a program running in the guest to gain access to the host’s complete file system and create or modify executable files in sensitive locations.”
The fix? For now they recommend disabling shared folders as there are no patches for any of the products affected: VMware Workstation, VMware Player, and VMware ACE.