MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors.Referenceshttp://mohachat.sourceforge.net/download/release_notes/#0.1b8http://www.vupen.com/english/advisories/2007/0599http://osvdb.org/31934
