When a VM is provisioned and a root password is entered in the provisioning tabs the password will be logged to the evm.log file.
This issue has been addressed in following products: CloudForms Management Engine 5.x Via RHSA-2014:0816 https://rhn.redhat.com/errata/RHSA-2014-0816.html