The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers.
matthew redman allmanage 2.6