Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors. NOTE: due to the lack of precise details, it is not clear whether this is related to a previously disclosed issue such as CVE-2005-1788.
https://exchange.xforce.ibmcloud.com/vulnerabilities/27340
http://www.vupen.com/english/advisories/2006/2459
http://www.securityfocus.com/bid/18565
http://securitytracker.com/id?1016444
http://secunia.com/advisories/20743
http://hostingcontroller.com/english/logs/hotfixlogv61_3_2.html