Microsoft ActiveSync has an information leak vulnerability where a password is passed in the clear.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39043/activePassword.txt
Source: https://packetstormsecurity.com/files/39043/activePassword.txt.html