Looks like quite a serious flaw. Better change my account p/w sharpish.

Thanks for bringing it to our attention. Mine was affected, too.

Seems like they were using crypt().