The Philips VOIP841 DECT cordless phone with an embedded Skype client suffers from a hidden administrative interface with a default login, directory traversal, and cross site scripting vulnerabilities.
ca377cc63b1fdc961af36a095f187918a72cd8179c8b5930245727e8467eb649