Is CMS a Compromise of Your Security?