GSKit in IBM Security Network Protection 5.3.1 before 5.3.1.7 and 5.3.2 allows remote attackers to discover credentials by triggering an MD5 collision.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-0236
http://www.securitytracker.com/id/1034696