> When connecting to a Firebird server via TCP/IP,
> are the passwords sent over the wire as plain text?

It is sent encrypted, however you can use this encrypted form
directly when connecting to database (just inform client
library that the provided password is already encrypted).

Ivan