Information disclosure

Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol...