Proficy Information Portal version 2.6 passes a user’s password base64 encoded on the wire, allowing for it to be easily intercepted and decoded.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/63006/proficy-harvest.txt
Source: https://packetstormsecurity.com/files/63006/proficy-harvest.txt.html