CVE-2007-1169: Undefined Security Weakness

The web interface in Trend Micro ServerProtect for Linux SPLX 1.25, 1.3, and 2.5 before 20070216 accepts logon requests through unencrypted HTTP, which might allow remote attackers to obtain credentials by sniffing the network...

CVE-2006-6430: Undefined Security Weakness

Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not require HTTPS, which allows remote attackers to obtain sensitive information by sniffing the unencrypted HTTP traffic...

CVE-2006-5806

SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does not restrict the user from saving files outside of the vault, which is not...

CVE-2006-5806: Undefined Security Weakness

SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does not restrict the user from saving files outside of the vault, which is not...

CVE-2006-4787

AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which displays unencrypted passwords in an error message. NOTE: some details are obtained from third party information...

CVE-2006-4787: Undefined Security Weakness

AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which displays unencrypted passwords in an error message. NOTE: some details are obtained from third party information...

CVE-2006-3457: Undefined Security Weakness

Symantec On-Demand Agent SODA before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection SODP before 2.6 Build 2233, do not properly encrypt files that are subject to policy-based automatic encryption, which might allow local users to read sensitive data via an...

CVE-2006-2461: Undefined Security Weakness

BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic...

CVE-2005-4704

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is intended to be used, causes an unencrypted protocol to be used in certain unspecified circumstances, which causes user credentials to be sent across the network...

CVE-2005-4704: Undefined Security Weakness

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is intended to be used, causes an unencrypted protocol to be used in certain unspecified circumstances, which causes user credentials to be sent across the network...

BEA Weblogic application server multiple vulnerabilities

Database passwords are stored unencrypted in cleartext, log files access, unauthorized MBean access, cleartext password logged on password change, etc...

Multiple Windows wireless adapters WEP protection bypass

Atacker can force client to downgradte to unencrypted cleartext mode operations...

Multiple Microsoft Internet Explorer vulnerabilities

Code execution, memory corruption, download dialog manipulation, unencrypted HTTPS proxy data leak...

CVE-2004-2642: Undefined Security Weakness

Yeemp 0.9.9 and earlier does not properly encrypt inbound files, which allows remote attackers to spoof the identity of the sender...

CVE-2005-3482

Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol LWAPP mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC...

POP2 Unencrypted Cleartext Logins

The remote host is running a POP2 daemon that allows cleartext logins over unencrypted connections. An attacker can uncover login names and passwords by sniffing traffic to the POP2 daemon. OpenVAS Vulnerability Test $Id: pop2unencryptedcleartextlogins.nasl 6056 2017-05-02 09:02:50Z teissa $...

IMAP Unencrypted Cleartext Logins

The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. An attacker can uncover user names and passwords by sniffing traffic to the IMAP daemon if a less secure authentication mechanism eg, LOGIN command, AUTH=PLAIN, AUTH=LOGIN is used. OpenVAS...

IMAP Unencrypted Cleartext Login

The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. NOTE: Valid credentials needs to given to the settings of SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

POP2 Unencrypted Cleartext Login

The remote host is running a POP2 daemon that allows cleartext logins over unencrypted connections. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

POP3 Unencrypted Cleartext Login

The remote host is running a POP3 daemon that allows cleartext logins over unencrypted connections. NOTE: Depending on the POP3 server configuration valid credentials needs to be given to the settings of SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from ...