Icecast uses default source-password if it's not defined in config
This can be a security problem if is not defined in the Icecast config file.
Under such conditions a default password will take effect.
Impact should be limited, as default config contains that tag, but there are constellations where e.g. an Icecast admin would unwittingly allow anyone to stream through their server.
To upload designs, you'll need to enable LFS. More information