Management Interface crossite scripting. Additionally, cleartext password is contained in session cookie and server log files.
vulners.com/securityvulns/securityvulns:doc:12939
vulners.com/securityvulns/securityvulns:doc:12954
vulners.com/securityvulns/securityvulns:doc:13690
vulners.com/securityvulns/securityvulns:doc:13691
vulners.com/securityvulns/securityvulns:doc:13692
vulners.com/securityvulns/securityvulns:doc:13709