HTC has acknowledged that a security flaw affecting several of the company's popular wireless devices allows malicious apps to steal users' Wi-Fi passwords. A fix for the issue has been developed and even deployed via software update to many of the affected devices.