Cryptocat prior to 2.0.22 has weak encryption in the Socialist Millionnaire Protocol
cryptocat project cryptocat