The new password functionality of DCForum, used to recover lost or forgotten passwords, creates passwords with data taken from the session id. This effectively sets the new password to a known...