Apparently cookies is used for login to bugzilla. They are
persistent from session to session. Thus once logged in from
a public account (or a random clients browser) MY bugzilla
account becomes public as well.

I suggest:
1: Add a "logout" option which clears the cookie
2: Add a timeout to cookies

check deja.com for how to do it.

I guess the temporary fix is to remove the cookie manually
or disable cookies. However the bug remains in bugzilla...

Regards, mads