I also want to note that the Microsoft Security Response Center was very helpful to me. It was only when I forwarded it to Microsoft Product Support Services was I ignored.

Also apparently some people don't agree that this is a valid security problem. I think it's fairly easy for someone to set up a packet sniffer inside a LAN, and have passwords sent remotely. Also due to the fact that this is primarily a consumer product it would make it easier to exploit (most consumers not paying attention to security). Some businesses may also use the product to split-off low cost high speed internet, and they may take the problem a bit more seriously.

I probably should also say that I think it's still a great product (much better than some of the competing consumer routers).