Bugzilla versions 2.18, 2.19.2, and 2.16.8 suffer from information disclosure and and password leak flaws.