The Yahoo! Tumblr app prior to 3.4.1 for iOS sends cleartext credentials, which allows remote malicious users to obtain sensitive information by sniffing the network.
yahoo tumblr