Changed to md5 password hashes
Added file download vulnerability
Added file download vulnerability