http://securityfocus.com/archive/75/...5/2003-05-11/0

A vulnerability has been discovered that allows a malicious person to change someones Passport password with very little work. Definately something to take into consideration if by chance you use the Passport system for any important business related things.