I have auto login disabled and when Drupal sends a new subscriber their first login email it shows that their password is the first letter of the password they typed into the reg form. Example "test" comes back as 't'
You CAN log in using just 't' then too.
It is doing this for every new account.
I am on Drupal 6.13 and PayPal Sub 6.x-4.4 Linux PHP5 & APache at HostGator








I have confirmed this bug as well, and I will fix it by the next release.
-Leighton