Doesn't go to gmail on click, major security flaw

[[e-mail]]

Binary package hint: gnome-gmail-notifier

When I click on the applet in the notification area, rather than redirecting the browser to gmail, it tries to go to a web address which looks like:
https://www.google.com/accounts/ServiceLoginAuth?ltmpl=default&ltmplcache=2&continue=https://mail.google.com/mail/%3F&service=mail&rm=false&Email=MYEMAILADDRESS&Passwd=MYPASSWORD&rmShown=1&signIn=Sign+in
to me, this either means it is broadcasting my password for all to see (VERY MAJOR SECURITY PROBLEM) or someone only has to click on the applet whilst im not looking and they have access to pretty much everything.

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: gnome-gmail-notifier 0.10.1-0ubuntu1
ProcVersionSignature: Ubuntu 2.6.32-21.32-generic 2.6.32.11+drm33.2
Uname: Linux 2.6.32-21-generic i686
Architecture: i386
CheckboxSubmission: 06e2e821c599a7e6a6d0dffe7ed519f8
CheckboxSystem: 669b662da410063cc918e0f60cf6cddf
Date: Mon May 3 00:08:29 2010
ProcEnviron:
 LANG=en_GB.utf8
 SHELL=/bin/bash
SourcePackage: gnome-gmail-notifier

[Marc Deslauriers (mdeslaur)]

Upstream bug: http://code.google.com/p/gnome-gmail-notifier/issues/detail?id=65

[Hartog de Mik (hartog-de-mik)]

Leaving your screen unlocked and unattended is always a security risk.

And granted; it would be nicer if the applet just brought you to http://gmail.com/ without adding your password in the URL for all proxies to log