this $ users are available in one of my server as well but i havent removed it yet.

as per me no body can access using that logins so how security issue?

experts clarify if i am wrong.