PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.
phpjabbers availability booking calendar 5.0