OneOrZero Helpdesk v1.6.0 - v1.6.4 has an insecure password reset function that allows anyone to guess what the password is set to provided they know what the time of the server is. POC included.
50bd7c551376b0ecee12ad9ea67a2f39a8266ad54dc574489d124ff3cb0c245a