Novell GroupWise 7 before SP2 20070524, and GroupWise 6 before 6.5 post-SP6 20070522, allows remote attackers to obtain credentials via a man-in-the-middle attack.
https://secure-support.novell.com/KanisaPlatform/Publishing/300/3382383_f.SAL_Public.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/34655
http://www.vupen.com/english/advisories/2007/2024
http://www.securityfocus.com/bid/24258
http://securitytracker.com/id?1018180