Dreamweaver

DATE	CVE	VULNERABILITY TITLE	RISK
2004-12-31	CVE-2004-1893	Remote User Database Access vulnerability in Macromedia Dreamweaver Dreamweaver MX, when "Using Driver On Testing Server" or "Using DSN on Testing Server" is selected, uploads the mmhttpdb.asp script to the web site but does not require authentication, which allows remote attackers to obtain sensitive information and possibly execute arbitrary SQL commands via a direct request to mmhttpdb.asp. network low complexity macromedia	5.0
1998-06-11	CVE-1999-1271	Unspecified vulnerability in Macromedia Dreamweaver Initial Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other users. local low complexity macromedia	2.1