CVE-2007-5470

Microsoft Expression Media stores the catalog password in cleartext inside the catalog IVC file, enabling local users to read sensitive credentials and access the catalog. The weakness stems from a design flaw in the catalog password-protection feature; exploitation details are not provided in th...