[Stefan-H]

Hardly - if you are not using HTTPS in the first place then sending the hash across the wire instead of the password are the least of your worries.