CVE-2012-1923: Realnetworks Helix Mobile Server

Low severity, CVSS 2.1. EPSS: 38.3% chance of exploitation in the next 30 days.

RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local users to obtain sensitive information by reading a database.

Affected products

• Realnetworks Helix Mobile Server: version 14.0.0 only; version 14.0.1 only
• Realnetworks Helix Server: version 14.0.0 only; version 14.0.1 only; version 14.2 only; version 14.2.0.212 only

Published 2012-04-17. Last modified 2026-06-16.