[Plugin: Theme My Login] Big security issue

Im runnig on Wp 2.8.4 and Theme My Login 4.3.
The big security issue is that if you know the username you can enter what ever as password. for an example User: admin Password: what ever you want.

http://ww.wp.xz.cn/extend/plugins/theme-my-login/