Paros version 3.2.5 and below may contain a flaw where a remote attackers can connect to a database port opened on the machine running Paros, without supplying any credentials.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40874/Parosproxy-3.2.5.txt
Source: https://packetstormsecurity.com/files/40874/Parosproxy-3.2.5.txt.html