Currently Parallels checks for updates at update.parallels.com:80 over plain HTTP. It should use HTTPS instead.