CVE-2016-6603
ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP header.
Date published : 2017-01-23
http://www.securityfocus.com/bid/92402
http://www.securityfocus.com/archive/1/539159/100/0/threaded