Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the game server, which allows malicious game servers to steal account information.
https://exchange.xforce.ibmcloud.com/vulnerabilities/36978
http://www.securityfocus.com/bid/25943
http://www.securityfocus.com/archive/1/481616/100/0/threaded
http://securityreason.com/securityalert/3202