Which of the following observations should be of GREATEST concern to an IS auditor when auditing web application security control as part of an IT general contr...