CVE:CVE-2006-4615
CNNVD:CNNVD-200609-058
Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10将用户名和密码以纯文本格式存储在%PROGRAMFILES%\IMPlus\implus.cfg中，这可让本地用户通过读取该文件来获取敏感信息。
solution:Upgrade shape_services im+_mobile_instant_messenger to a higher version than 3.10_for_pocket_pc,and avoid the version 3.10_for_pocket_pc