WHID 2006-38: Convenience or just bad design?

Attack Information
WHID ID: 
2006-38
Date Occured: 
24 Jul 2006
Attack Method: 
Outcome Information
Outcome: 

Altiris seems to have designed their servers so that it is easy to both access their customers upload as well as find out their e-mail addresses.

Additional information: