FTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.Referenceshttp://securitytracker.com/id?1013657http://secunia.com/advisories/14889https://exchange.xforce.ibmcloud.com/vulnerabilities/20025http://www.osvdb.org/15296
