The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to obtain sensitive information by sniffing the HTTP traffic.
http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=363