CFNetwork in Apple iOS before 5 stores AppleID credentials in an unspecified file, which makes it easier for remote attackers to obtain sensitive information via a crafted application.
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html