Byostech need to get on and release a Joomla 1.5.6 version of JaclPlus
right now!, especially as 1.5.6 is a security release to fix a major issue.
However, for those of you worried about the security risk who don't want to have to *keep* updating until ByosTech get round to releasing a 1.5.6 patch, here's the (one) code change you need to make to versions of Joomla prior to 1.5.6.
http://developer.joomla.org/security/news/241-20080801-core-password-remind-functionality.html