When you're writing a report, what person do you write it as?  

First person singular: I discovered a vulnerability in HP Power Manager... 

First person plural: We discovered a vulnerability in HP Power Manager...

Third person singular, by name: Bob discovered a vulnerability in HP Power Manager...

Third person singular, general: The tester discovered a vulnerability in HP Power Manager...

Third person singular, attacker: The attacker discovered a vulnerability in HP Power Manager...

Some other options:

Passive voice: A vulnerability in HP Power Manager was discovered...

Present tense: HP Power Manager is vulnerable to...

It is most common (in the UK at least) to use the passive voice. I prefer using present tense when possible, and first person plural otherwise; the writing feels more personal. But this is controversial; a lot of people think reports are supposed to be formal and not at all personal.
