User credentials sent to united.com did not transit over HTTPS upon submission.
b8e25796c63cdf0f3589e2be7707e41dd0340542c486725ce5ef88b491926261
Comcast Webmail AT+T Message Center version 1 had a flaw that allowed arbitrary code execution client-side due to the allowance of inbound HTML mail to be executed outside of the restricted zone.
07e88e9a638298baf1818d056ec714b8942bfdcd19ae5d8f7e063df84ee54129
SECNAP Network Security Advisory - 3com NBX IP VOIP NetSet(r) Configuration Manager is susceptible to a denial of service attack due to insufficient user input checking.
c99d772735d7831ba12cfb81734ff1a51c3a3ace98a5c750624b8716c881fe00
The Symbol PDT 8100 does not attempt to change its default existing WEP keys during installation. If not changed, the PDT 8100 will reveal the WEP keys to any user in plain text by taping on the wireless icon on lower right hand of 8100 and scrolling to the 'encryption tab'. A stolen PDT 8100 or copied keys can allow an insider the ability to totally compromise the Wi-Fi network.
0ef878b8880cfbb42ed45bacdfc32fa99f275624901e1d58461985859e733d1f
The Goldmine mail agent can run arbitrary code via a malicious formed HTML e-mail. It does not even run the email in the 'security zone' as does Microsoft Outlook, but passes anything that looks like HTML to be executed unrestricted directly to the default Browser, which for many is usually Internet Explorer.
1b72a78af77f5a6ac40daf2d853841dc47e50923fa1bb291243b012faeec5599