Description Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier. Remediation References CVE-2017-7888 Related Vulnerabilities WordPress Plugin WP eCommerce Security Bypass (3.8.14.3) WordPress Plugin YITH WooCommerce Subscription Security Bypass (1.3.4) WildFly Application Server Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Vulnerability (CVE-2016-4993) Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1117) WordPress Plugin Usernoise modal feedback/contact form Cross-Site Scripting (3.7.8) Severity Critical Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-326 CVE-2017-7888