In Arial Campaign Enterprise prior to 11.0.551, multiple pages are accessible without authentication or authorization.
arialsoftware campaign enterprise