CesarFTP 0.98b and previous versions stores usernames and passwords in plaintext in the settings.ini file, which allows malicious users to gain privileges.
aclogic cesarftp