ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors related to (1) the Logins box and (2) the Search box.Referenceshttp://www.hackerscenter.com/archive/view.asp?id=26656http://securitytracker.com/id?1017384