ICT Protege GX/WX version 2.08 suffers from a client-side SHA1 password hash disclosure vulnerability. Continue reading...