Editing LISTSERV (section)

== Security ==
Individual user [[password]]s were stored in plaintext until version 15.0. This made them available to users who are listed as "Site Managers" or "Postmasters" in the application configuration. Storing passwords in plaintext has the potential to allow anyone with access to the site, including attackers who might have compromised the site, to read the credentials. With the 2007 release of version 15.5, passwords are now stored [[Cryptographic hash function|hashed]] to defend against this attack.<ref>{{cite news
 | url=http://www.lsoft.com/manuals/15.5/htmlhelp/what's%20new/WhatsNew.3.1.html
 | title=What's New for LISTSERV
 | work=
 | author=
 | date=2007
 | accessdate=2012-03-08 }}
</ref>