CVE-2006-0920

Oi! Email Marketing System 3.0 (Oi! 3) stores the server FTP password in cleartext on a Configuration web page, enabling local superadministrators or anyone with web-page access to view the password. This vulnerability exposes confidential credentials and arises from cleartext password storage on...

[Full-disclosure] Password disclosure and remote access in Netcool/NeuSecure Security information management platform

Multiple security information disclosure paths and remote access Netcool/NeuSecure Security information management platform . Cleartext-storage of passwords in the configuration file Cleartext reporting of user password in the log Default backend Mysql database user and remote access. Laxed...

CVE-2005-4506

Nexus Concepts Dev Hound 2.24 and earlier stores username and password information in cleartext in the devhound.tdbd file, which allows local users to gain privileges...

CVE-2005-2766

The CVE affects Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x (and possibly other versions) where, during updates from an internal LiveUpdate server, the Log.Liveupdate file stores the LiveUpdate username and password in cleartext. This plaintext credential exposure could allow an atta...

CVE-2005-2766: Undefined Security Weakness

Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x, and possibly other versions, when obtaining updates from an internal LiveUpdate server, stores sensitive information in cleartext in the Log.Liveupdate log file, which allows attackers to obtain the username and password to the internal...

CVE-2004-2397: Cleartext Storage of Sensitive Information

The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a private key, stores the key and its passphrase in plaintext in a log file, which allows attackers to steal digital certificates...

CVE-2001-1527

The CVE affects easyNews 1.5 and earlier, where administration passwords are stored in cleartext in the file settings.php. This enables local users to obtain passwords and gain access due to improper password storage. The provided documents do not specify a vendor patch or remediation steps; no e...

CVE-2001-1537: Cleartext Storage of Sensitive Information

The default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores cleartext usernames and passwords in cookies, which could allow attackers to obtain authentication information and gain privileges...

CVE-2001-1536: Cleartext Storage of Sensitive Information

Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain authentication information and gain unauthorized access via sniffing or a cross-site scripting attack...

CVE-2005-2209: Cleartext Storage of Sensitive Information

Capturix ScanShare 1.06 build 50 stores sensitive information such as the password in cleartext in capturixsscfg.ini, which is readable by local users...

CVE-2005-2160: Cleartext Storage of Sensitive Information

IMail stores usernames and passwords in cleartext in a cookie, which allows remote attackers to obtain sensitive information...

CVE-2002-1800: Cleartext Storage of Sensitive Information

phpRank 1.8 stores the administrative password in plaintext on the server and in the "ap" cookie, which allows remote attackers to retrieve the administrative password...

CVE-2001-1481: Cleartext Storage of Sensitive Information

Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readable, which allows remote attackers to gain privileges...

CVE-2002-1696: Cleartext Storage of Sensitive Information

Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when "Automatically decrypt/verify when opening messages" option is checked, "Always use Secure Viewer when decrypting" option is not checked, and the user replies to an encrypted...

CVE-2005-1828: Cleartext Storage of Sensitive Information

D-Link DSL-504T stores usernames and passwords in cleartext in the router configuration file, which allows remote attackers to obtain sensitive information...

CVE-2004-2049

Summary (CVE-2004-2049) : The eSeSIX Thintune thin clients (firmware

CVE-2004-2049: Undefined Security Weakness

eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper library, which allows attackers to gain access...

CVE-2005-1166

The CVE-2005-1166 entry concerns DameWare NT Utilities (DNTUS26) and MiniRemote Control (DWRCS) up to version 4.9, where the username and password are stored in memory in plaintext. This in-memory credential exposure could allow a local attacker to obtain sensitive information. The connected sour...

CVE-2005-0822: Undefined Security Weakness

Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy...

CVE-2005-0506

The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as Avaya\IP400\Generic...