Including, but not limited to, sending passwords in cleartext on login.