CVE-2007-3146
Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb.
Date published : 2007-06-11
http://www.securityfocus.com/archive/1/470803/100/0/threaded