It's better than some of the fortune 100 organizations I've consulted for who set every new password to "Welcome1" or "ChangeMe2!" \:D

A simple way to improve this is to create a string of 10 symbols, generate a random number between 0 and 9 and use that to index into the string to add a random symbol between the two standard character sets.

You can also randomly capitalize one of the chars, forcing the others to lower case (including any that might be naturally capitalized).

I'd imagine that this would be part of some helpdesk routine to reset a password when someone calls in about one they forgot, so the exposure should be pretty limited.
_________________________
Actually I am a Rocket Scientist! \:D