Access analysis CGI An-Analyzer released in 2019 June 24 and previous versions allow remote malicious users to obtain a login password via HTTP referer.
anglers-net cgi an-anlyzer