SickRage versions prior to 2018.03.09 return clear-text credentials in HTTP responses. Continue reading...