Am running Vista SP1 Business 64bit and latest NIS 2009 V16.2 with addon pack and IE7 browser (fully patched).
There is a flaw in Privacy Control where passwords can be entered into a specific type of user forum without Privacy Control alerting that the password is being sent. The two forums are:
Note that these two forum are the same "brand" of forum. All other forums that I visit required approval when entering the password for the specific forum. None of the other forums are the "brand" that the two above are.