CVE-2003-1394: Undefined Security Weakness

CoffeeCup Software Password Wizard 4.0 stores sensitive information such as usernames and passwords in a .apw file under the web document root with insufficient access control, which allows remote attackers to obtain that information via a direct request for the file...

CVE-2007-4550

Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an fnm field in a folder-name record in an ALPASS DB APW file...

Buffer overflow

Multiple buffer overflows in ALPass 2.7 English and 3.02 Korean allow user-assisted remote attackers to execute arbitrary code via an ALPass DB APW file containing 1 a long file-key or 2 a "Site Information and Folder entry" with a ciphertextlength value much larger than the plaintextlength value...

Format string

Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an fnm field in a folder-name record in an ALPASS DB APW file...

CVE-2007-4549: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in ALPass 2.7 English and 3.02 Korean allow user-assisted remote attackers to execute arbitrary code via an ALPass DB APW file containing 1 a long file-key or 2 a "Site Information and Folder entry" with a ciphertextlength value much larger than the plaintextlength value...

CVE-2007-4550: Use of Externally-Controlled Format String

Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an fnm field in a folder-name record in an ALPASS DB APW file...