Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, which allows local users to gain privileges.
savant savant webserver 3.1