Basically the subject says it all, the SMTP Authorization password is not masked, probably should be and should also have a confirm password.