curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server.Referenceshttps://curl.haxx.se/docs/CVE-2003-1605.htmlhttp://www.securityfocus.com/bid/8432
