YaBB version 1, SP 1.3.1, leaks whether or not a username is valid when an invalid password is given.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32703/yabb.infoleak.txt
Source: https://packetstormsecurity.com/files/32703/yabb.infoleak.txt.html