YES, FTP is vulnerable. Brute force attacks can be applied by hackers to hack FTP.