Does it at least have a cool down period? Like if you try your username n times in the last hour, you get locked out and can't try any more for m hours?
Well, as it only supports TLS 1.0 and SSL 3 (C grade on SSL labs), plus looks like it's running an old version of Web Forms, I think you're probably fine. :/