CVE-2005-2664: WHISPER32

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Whisper 32 1.16, and possibly earlier versions, stores passwords in plaintext in memory, which allows local users to obtain the password using a debugger or another mechanism to read process memory.

Affected products

Published 2005-08-23. Last modified 2026-06-16.