What version? Under what circumstances does it happen?
This is a new problem. In older versions of WinSCP, name and/or password were only saved if user did so explicitly. Since using newer versions of WinSCP user name and password get saved automatically. This is a serious bug for people using WinSCP in an open environment such as a PC-Pool or Internet-Café.
Yours,
Dave