The plain text is sent in the clear; this authenticates almost nothing (given that the man in the middle had no trouble forwarding it, with whatever changes he felt like making).