CVE-2006-4615: Shape Services Im+ Mobile Instant Messenger

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10 stores usernames and passwords in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg, which allows local users to obtain sensitive information by reading the file.

Affected products

• Shape Services Im+ Mobile Instant Messenger: version 3.10_for_pocket_pc only

Published 2006-09-07. Last modified 2026-06-16.