Kolab server version 1.x suffers from an information disclosure vulnerability where it stores the OpenLDAP root password in clear text in slapd.conf.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33261/kolab.html
Source: https://packetstormsecurity.com/files/33261/kolab.html.html