Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\\Documents and Settings\\username\\SecurityScans in plaintext which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java.