Is this somewhat unsafe to show the password in the profile because everybody who are using the same computer with me will be able to see my password in the profile! I think it should be hidden or at least shown as ****.

are the passwords transmitted to the server in plaintext as well? i dont want people on my network sniffing them out.

The password is stored as a hash, but in a plaintext file. I'd reccomend you use something long that you don't use anywhere else

If you're running under 2K/XP you could always encrypt the file locally so only your user account can view it.