Plone allows anonymous users to reset any users password through the web via Password Reset Tool (CVE-2006-4247) | HOL Guard CVE