Database names.nsf with password hashes is world readable.
vulners.com/securityvulns/securityvulns:doc:9469
vulners.com/securityvulns/securityvulns:doc:9542