eCart Web version 4.0.0 appears to leave a default administrative account in place post installation.