Level 3- It says the script is calling password.txt, so go find password.txt.
Level 4- The script sends the e-mail to whatever e-mail address is in the form, change the form e-mail.
Level 5- You'd have to create your own script, put it up somewhere and fake the referrer. Probably can be done by running a web server on your machine and editing the hosts file.