WordPress Contact Form Generator version 2.0.1 suffers from multiple cross site request forgery vulnerabilities.
1e996c213120613613563f4cd899c0f0986297751b82de9c0216816f2b0fac21
Avira Mobile Security versions 1.5.7 and below send credentials in the clear over HTTP.
07268a63a10e9e04ee38ecd991fda216994295c0b1d633261d7e59f97a112f35