Is there a US-CERT advisory for this yet?<p>Why are those APIs even there?  A &quot;retrieve all passwords in the clear&quot; API?  A &quot;run browser insecurely&quot; API?<p>Has anyone considered charging Trend Micro with reckless endangerment or material support of terrorism?