CVE-2001-1527

easyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which allows local users to obtain the passwords and gain access...

CVE-2001-1537

The default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores cleartext usernames and passwords in cookies, which could allow attackers to obtain authentication information and gain privileges...

CVE-2001-1571

The CVE-2001-1571 entry concerns the Windows XP Remote Desktop client, where the Remote Desktop user name is sent in cleartext. This behavior could allow an attacker to sniff and obtain terminal server user account names over the network. The connected Red Hat and CVE references reiterate the sam...

CVE-2001-1571

The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user account names via sniffing...

CVE-2001-1536

Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain authentication information and gain unauthorized access via sniffing or a cross-site scripting attack...

CVE-2001-1527

The CVE affects easyNews 1.5 and earlier, where administration passwords are stored in cleartext in the file settings.php. This enables local users to obtain passwords and gain access due to improper password storage. The provided documents do not specify a vendor patch or remediation steps; no e...

CVE-2001-1519

RunAs runas.exe in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then capture cleartext usernames and passwords when clients connect to the service. NOTE: the vendor disputes this issue, saying that administrative privileges are already required to...

CVE-2001-1517

RunAs runas.exe in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to obtain usernames and passwords by executing a process that is allocated the same memory page after termination of a RunAs command. NOTE: the vendor disputes this issue, saying tha...

OpenLdap pam_ldap / nss_ldap weak password change encryption

TLS is not used with LDAP server during password change, password is transmitted in cleartext...

CVE-2005-2209

Capturix ScanShare 1.06 build 50 stores sensitive information such as the password in cleartext in capturixsscfg.ini, which is readable by local users...

CVE-2005-2209

CVE-2005-2209 affects Capturix ScanShare 1.06 build 50. The connected PT-2005-3138 entry confirms the issue is the storage of passwords in cleartext in the capturixss_cfg.ini file, which is readable by local users. The root cause is cleartext storage of sensitive information in a local configurat...

PT-2005-3138 · Capturix · Capturix Scanshare

Name of the Vulnerable Software and Affected Versions: Capturix ScanShare version 1.06 build 50 Description: The issue concerns the storage of sensitive information, such as passwords, in cleartext within the capturixss cfg.ini file. This file is readable by local users, potentially exposing the...

Access Remote PC weak password encryption

Proxy server password is stored in cleartext in registry...

CVE-2005-2160

IMail stores usernames and passwords in cleartext in a cookie, which allows remote attackers to obtain sensitive information...

CVE-2005-2160

CVE-2005-2160 affects Ipswitch IMail. The connected documents confirm that IMail stores usernames and passwords in cleartext in a cookie, enabling remote attackers to obtain sensitive information. Root cause: credentials exposed in a cookie; impact is disclosure of credentials (no integrity/avail...

CVE-2005-2160

IMail stores usernames and passwords in cleartext in a cookie, which allows remote attackers to obtain sensitive information...

PT-2005-3092 · Ipswitch · Imail

Name of the Vulnerable Software and Affected Versions: IMail affected versions not specified Description: The issue allows remote attackers to obtain sensitive information because usernames and passwords are stored in cleartext in a cookie. Recommendations: At the moment, there is no information...

DEBIAN-CVE-2005-2069

pamldap and nssldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password...

CVE-2005-2069

Removed by vendor...

CVE-2002-1949

CVE-2002-1949 affects Iomega NAS A300U Admin Web Page, where credentials are transmitted in cleartext over the network, enabling remote password sniffing. Connected docs corroborate the issue and provide limited remediation guidance: IBM bulletin notes remediations for Jazz Foundation products (u...