Is 123456 Really the Most Common Password? (xato.net)

I've heard from security folks that 'changeme' and 'iforgot' are quite common also.