MELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local configuration file.
CWE-312