admin/management.html in PineApp Mail-SeCure allows remote malicious users to bypass authentication and perform a sys_usermng operation via the it parameter.
pineapp mail-secure -