Peter,

In your case it is not such a problem, as the user is typing the password in anyway. However you need to be aware that the command line values are visible to anyone with remote access via WMI to you process table.

In general you should avoid passwords as command line parameters unless you can ensure that they will not appear in the process table.

This is more of a problem when you have a password embedded in the script, and you are trying to hide it from an end-user.

I've looked at the utility you use, and it does not support the passing of values in environment variables - perhaps you could contact the authors and suggest adding it. It is a trivial coding exercise, and would enhance their product.