The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network.Referenceshttp://www.securityfocus.com/bid/34847http://www.mitel.com/resources/NuPoint_and_Exchange.pdfhttp://www.kb.cert.org/vuls/id/576996
