CVE-2020-4778
software uses MD5, which is less safe than the default SHA-256 used by related products
CVE-2005-2946
Default configuration of product uses MD5 instead of stronger algorithms that are available, simplifying forgery of certificates.