ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTER_ACCOUNT, which allows remote attackers to modify account information in the .htpasswd file via brute force password guessing.
https://exchange.xforce.ibmcloud.com/vulnerabilities/7352
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-0822