The root folder of your installed X-Cart store still contains the file install.php that is used to launch X-Cart installation. Keeping this file in the said location 'as is' is not secure. We strongly recommend that this file should be deleted or renamed to prevent unauthorized access to the store installation tools.