Search engines and specialized "IoT scanners" (like Shodan) constantly crawl the internet for open 8080 ports. If your webcamXP server is active and you haven't set a password, your private camera feed could be indexed and viewed by strangers.
Early versions of WebCamXP (particularly 5.x and earlier) implemented a rudimentary authentication mechanism. To view a protected stream, a user had to append an access key to the URL or enter it in a login dialog. my+webcamxp+server+8080+secret32
or crash the service by using malicious HTML in a chat name. IBM X-Force Exchange Recommended Fixes Search engines and specialized "IoT scanners" (like Shodan)
Because Shodan indexes HTTP response headers, secret32 becomes searchable. secret32 becomes searchable.