As far as I can tell the passwords for phpbb are hashed with md5. Could someone correct me if I'm wrong? And if this is the case, this is a much larger issue, and warrants more of a response than simply reseting the password and burying it in a blog post about something else.

http://sources.debian.net/src/phpbb3/3.0.12-1/includes/funct...