defect 37 with clm/passw0rd