Foundstone Labs Advisory – Citrix MetaFrame Password Manager 2.0 has a flaw where it will locally store credentials unencrypted if the agent is not pointed to a central credential store.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33020/FoundstoneCitrix.txt
Source: https://packetstormsecurity.com/files/33020/FoundstoneCitrix.txt.html