You must be retarded or using a crappy browser because only the MD5 hash of the password is sent to the server via HTTP POST. I checked myself.
Code:vb_login_username=master131&vb_login_password=&vb_login_password_hint=Password&s=&securitytoken=guest&do=login&vb_login_md5password=<md5 hash>&vb_login_md5password_utf=<md5 hash>