FTP sites accounts are stored in world readable file.
vulners.com/securityvulns/securityvulns:doc:8297