CVE-2009-2951

Phenotype CMS prior to version 2.9 does not use a random salt for password encryption, enabling context-dependent attackers to determine cleartext passwords. Affected: Phenotype CMS