Backdoor feature in web interface allows unauthenticated administrative access.
vulners.com/securityvulns/securityvulns:doc:12578
vulners.com/securityvulns/securityvulns:doc:8664
vulners.com/securityvulns/securityvulns:doc:8759
vulners.com/securityvulns/securityvulns:doc:9286