OWASP CVEs for Brute Force in 1998