2
it looks suspicious.
i would recommend upgrading to XOOPS 2.0.13.2 as it fixes quite a few security issues.
i also recommend installing the XOOPS protector module.
i would recommend also once upgraded to have all webmasters or anyone with admin privileges to change their passwords aswell..