So does the form or the library have different permisisons then other content on the site?
InfoPath / IE is going to pass the current windows user credentials. So a password update should not be a big deal as long as the information via IE is getting passed correctly.
I have seen in 2003 where people had to save their info once and then it would pass properly. I have not had a problem with 2007 other than some Vista WebDav issues.