A large majority of Android smart phones have been found to have a vulnerability that allows adversaries to gain access to usernames & passwords used to access calendars, contacts & lots of other data that is stored on Google’s servers. The vulnerability owes its thanks to the fact that many of the details stored on the devices are transmitted to Google’s servers in plain text.
Edit: Google has now released a fix for this problem



