23,000 web sites left open

ZDNet reports that Mindspring may have left 23,000 web sites open to attack, by leaving a password-containing file in a bad place.