Team Password Manager (aka TeamPasswordManager) prior to 10.135.236 allows password-reset poisoning.
teampasswordmanager team password manager