Most - if not all - security issues are supposedly resolved if Kerberos is implemented.

Which is not the case where I work.