CVE-2007-6330

Meridian Prolog Manager 2007 and earlier versions (including 7.5 and prior) transmit all usernames and passwords to the client in cleartext or weakly encrypted form to support client-side authentication. This can enable an attacker to capture credentials via network sniffing or a man-in-the-middl...

SuSE 10 Security Update : fetchmail (ZYPP Patch Number 2608)

Three security issues have been fixed in fetchmail : - fetchmail when configured for multidrop mode, allows remote attackers to cause a denial of service application crash by sending messages without headers from upstream mail servers. CVE-2005-4348 - fetchmail did not properly enforce TLS and ma...

Design/Logic Flaw

The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption XOR of unpadded data to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack...

CVE-2007-6192

The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption XOR of unpadded data to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack...

CVE-2007-6096

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of "administrators with less privileges," which might allow attackers to read these passwords via unknown vectors...

Design/Logic Flaw

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of "administrators with less privileges," which might allow attackers to read these passwords via unknown vectors...

CVE-2007-6096

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 store passwords for “administrators with less privileges” in cleartext, enabling possible reading by an attacker via unspecified vectors. Affected components are the password storage mechanism; root cause indicated as cleartext storage. No e...

CVE-2007-6096

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of "administrators with less privileges," which might allow attackers to read these passwords via unknown vectors...

CVE-2007-5778

Mobile Spy 1 stores login credentials in cleartext under the RetinaxStudios registry key, and 2 sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network...

Information disclosure

Mobile Spy 1 stores login credentials in cleartext under the RetinaxStudios registry key, and 2 sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network...

CVE-2007-5778

CVE-2007-5778 affects Mobile Spy (Retinax Studios). The vulnerability arises from storing login credentials in cleartext under the RetinaxStudios registry key and transmitting login data over cleartext HTTP, enabling credential exposure through registry access or network sniffing. The connected P...

CVE-2007-5778

Mobile Spy 1 stores login credentials in cleartext under the RetinaxStudios registry key, and 2 sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network...

PT-2007-6745 · Retina X Studios · Mobile Spy

Name of the Vulnerable Software and Affected Versions: Mobile Spy affected versions not specified Description: The issue concerns the storage and transmission of sensitive information. Specifically, it involves storing login credentials in cleartext under a specific registry key and sending login...

Default credentials

The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to obtain sensitive information by sniffing the HTTP traffic...

CVE-2007-5768

The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to obtain sensitive information by sniffing the HTTP traffic...

CVE-2007-5768

The CVE-2007-5768 entry affects the Globe7 soft phone client version 7.3, which transmits username and password in cleartext over HTTP. This exposes credentials to network eavesdropping, enabling potential disclosure of sensitive information. The vulnerability is a information disclosure issue ca...

CVE-2007-5768

The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to obtain sensitive information by sniffing the HTTP traffic...

CVE-2002-2384

hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service...

CVE-2002-2384

The CVE-2002-2384 entry concerns Hotfoon 4.00. hotfoon4.exe stores user names and passwords in cleartext in the hotfoon2 registry key, enabling local users to gain access to user accounts and steal phone service. Root cause: credentials stored in plaintext in a registry location. Impact: local ac...

CVE-2002-2389

The CVE-2002-2389 entry concerns TheServer 1.74 web server. The vulnerability arises from storing server.ini under the web document root with insufficient access control, enabling remote attackers to read cleartext passwords and access server log files. This is corroborated by multiple connected ...