The admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which allows remote attackers to gain unauthorized access to the web server by viewing the source of admin.html.Referenceshttp://www.securityfocus.com/bid/5866http://www.iss.net/security_center/static/10298.phphttp://www.securityfocus.com/archive/1/293871
