Using Xsan Admin application for screen sharing embedded user credentials including passwords can result in an error dialog containing the user name and password. The password could be then shoulder surfed by another user  within view of the display.