ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.
NVD-CWE-Other