title: Nessus scanner returning a Cleartext credentials vulnerability
body: <p>I'm running Nessus on one of my websites and it returns "Web Server Transmits Cleartext Credentials" vulnerability.  It is a low level vulnerability, but I want to understand it.  </p>
  
  <p>My website encrypts the password text box and that is sent to a database procedure to compare to what encrypted password I have for that user in my database.  So even if it was cleartext the encrypted password is being sent across.  Does this mean that this vulnerability doesn't apply to my website or am I still allowing the password to be exposed?</p>
  
  <p>Thank you</p>