I don't know if this happends with you, but, when using xp publish, and it asks me for username and pass, if I just click next after inserting only username(no password), appear a screen notifying that the login information is incorrect, but if I click next again it skips the login screen. so anyone can post photos in your gallery knowing only your username.
link and test account?
GauGau