IBL Online Weather prior to 4.3.5a allows malicious users to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE cookie.
iblsoft online weather