Auditors found that a personal web page was being hosted on a state computer, as well as indications that problems from previous years had not been fully addressed.