MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."Referenceshttp://www.securityfocus.com/bid/11095http://secunia.com/advisories/12458https://exchange.xforce.ibmcloud.com/vulnerabilities/17217http://marc.info/?l=bugtraq&m=109416709710447&w=2