If a proxy server requires authentication, and that proxy communicates over HTTP, are the credentials sent over plain text to the proxy server?

If this is the case, isn't it possible to sniff the packets and get the credentials?