I noticed that my user "real name" (as I believe the password change form calls it) defaulted to my password. It's possible, though highly unlikely (i'm not normally a moron ;), that I did this at some point in the past, but I suggest you investigate to make sure this didn't happen for other users as well. it would show up in bug reports as my password as text being a href to my mailto address (login name). needless to say, my password has been changed.
adding a comment to test that my password no longer shows up as my real name on the bugzilla bug display.
I cannot replicate this. //zhen