In an earlier version of ubbthreads there was a security issue regarding passwords and updating profiles. I notice that in ubbthreads 7+ the password field is filled in. I presume that the mechanism works differently than it did, but it would be good to know that password spoofing is not possible in this version.