This is fixed in Power CMS 2.1.1.
to fix it in earlier version. edit the HTMLEditor/editor/plugins/kfm/configuration.php file. change:
<?php require_once( "../../../../Connections/PowerCMSConnection.php" ); ?>
<?php require_once( "../../../WA_Globals.php" ); ?>
to:
<?php require_once( "../../../../Connections/PowerCMSConnection.php" ); ?>
<?php require_once( "../../../WA_Globals.php" ); ?>
<?php require_once( "../../../../WA_SecurityAssist/Helper_PHP.php" ); ?>
<?php
if (!WA_Auth_RulePasses("Administrator")){
die();
}
?>