Security Vulnerability?

[billguy]

If I grant my domain users access to site builder, why is the administrative password found in the url of the page source?

E.g.
Admin grants access to regular user jblow to use site builder for his domain.
Jblow logs into his control panel
Jblow sees the new site builder button
Jblow views the html source for that particular page and finds the administrator password in the url.

Am I missing something????

 

[billguy]

nm. this only happens if sitebuilder, plesk, and the client domain are the same. my bad.