CVE-2011-4737

CVE-2011-4737 describes an information disclosure vulnerability in Parallels Plesk Panel 10.2.0, where the Control Panel inadvertently includes submitted passwords within HTTP response bodies. This flaw allows remote attackers to capture sensitive information, specifically passwords, by sniffing network traffic. With a CVSS score of 5.0 (medium severity), this vulnerability is easily exploitable over the network with low complexity, potentially leading to unauthorized access to user credentials. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.