CVE ID:	CVE-2005-3280
Description:	Paros 3.2.5 uses a default password for the "sa" account in the underlying HSQLDB database and does not restrict access to the local machine, which allows remote attackers to gain privileges.
Test IDs:	1.3.6.1.4.1.25623.1.0.56227
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3280 BugTraq ID: 15141 http://www.securityfocus.com/bid/15141 Bugtraq: 20060130 Re: [Full-disclosure] [ GLSA 200601-15 ] Paros: Default administrator password (Google Search) http://www.securityfocus.com/archive/1/423446/100/0/threaded http://www.gentoo.org/security/en/glsa/glsa-200601-15.xml http://www.zone-h.com/en/advisories/read/id=8286/ http://secunia.com/advisories/17089 http://secunia.com/advisories/18626 XForce ISS Database: paros-password-security-bypass(22557) https://exchange.xforce.ibmcloud.com/vulnerabilities/22557