Three vulnerabilities in Apple's iCal personal calendar application could enable remote attackers to install malicious code on victim's machines.