Redmine

Redmine account confirmation emails include personal data in plain text, like this:

Your account information:

    Login: user
    Password: password

Sign in: http://localhost:3000/login

This is a Very Bad Thing!