CVE:CVE-2007-2554
CNNVD:CNNVD-200705-155
Associated Press (AP) Newspower 为MySQL根账户使用默认的空白密码，这使得远程攻击者可以借助shows.tbl脚本，输入或修改新文章。
solution:Upgrade associated_press newspower to a higher version than 4.0.1,and avoid the version (,4.0.1]