Itrack Easy vulnerabilities

• itrack easy, kkmcn itrackeasy +1 more iTrack Easy mobile application stores the user password in base-64 encoding/cleartext CVE-2016-6546 7.8 HighJuly 13, 2018
• itrack easy, ieasytec itrackeasy +1 more iTrack Easy does not use session cookies to maintain sessions and POSTs the users password over HTTPS for each request CVE-2016-6545 9.8 CriticalJuly 13, 2018
• ieasytec itrack easy, itrack easy +1 more iTrack Easy's getgps data can be modified without authentication CVE-2016-6544 7.5 HighJuly 13, 2018
• ieasytec itrack easy, itrack easy +1 more A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data CVE-2016-6543 5.9 MediumJuly 13, 2018
• itrack easy, ieasytec itrackeasy +1 more The MAC address/device tracking ID of an iTrack Easy can be obtained within range of the device CVE-2016-6542 3.7 LowJuly 13, 2018