The Sambar webserver is running. It provides a web interface for configuration purposes. The admin user has no password and there are some other default users without passwords. Everyone could set the HTTP-Root to c:\ and delete your files! *** this may be a false positive - go to http://the_server/sysadmin/ and have a look at it by yourself

Change the passwords via the webinterface or use a real webserver like Apache.