Multiple unspecified vulnerabilities in the Login page in OrangeHRM before 20070212 have unknown impact and attack vectors.
http://www.vupen.com/english/advisories/2007/0781
http://www.securityfocus.com/bid/22756
http://sourceforge.net/tracker/index.php?func=detail&aid=1656000&group_id=156477&atid=799942