Thanks all for the advice, it's very much appreciated.
This morning I've reset the root password on the box and enabled authentication on Openwebif.
I've always wanted to be able to access my box over the external network but never got around to setting it up, although, it now looks like it was already set up and not very secure...
I would like to leave the external access (for myself ;)), is there anything else that I need to consider setting up?