How secure is your P@$$w0rd?

Recently we've seen a significant increase in the number of MDaemon servers we come across being used to send spam email, and we're finding that it's often via an authenticated SMTP session.