Reply to post:

Lack of encryption in this case doesn't necessarily mean a vulnerable website - it does, however, mean bad security practices and a distinct lack of giving a toss about the site visitors'privacy.