SECURITY WARNING: To avoid the need for patching cvs.exe, with the :pserver: method only, the password is now put in clear text on the cvs.exe command line while issueing the Connect (a.k.a. login) command. This is a potential security issue, as a malicious program running under administrative privileges might sniff the password. However, the :pserver: method is not a secure method anyway, so it's just paranoia.