High

DATE	CVE	VULNERABILITY TITLE	RISK
2009-07-14	CVE-2008-6859	Improper Authentication vulnerability in Xigla Absolute Control Panel XE 1.5 Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value. network low complexity xigla CWE-287	7.5
2009-05-01	CVE-2009-1504	Improper Authentication vulnerability in Xigla Absolute Control Panel XE 1.5 Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to "lvl=1&userid=1." network low complexity xigla CWE-287	7.5