Cacti remote password retrieval security flaw?

[evilzardoz]

Hi,

During some penetration testing, it was foud that an installation of cacti was vulnerable to having the passwords retrieved of accounts on the server!

Is this a known problem with 0.8.7e?

Is there a way to enable a form of one-way encryption to ensure that we don't get passwords compromised by an (illegitimate) third party?

Thanks