harvesting emails
Like Phil, I tend to have various levels of passwords depending on the site. Important ones are always unique and my secure passwords tend to be random-seeming (unless you happen to know which line(s) of which poem/song or which inspirational quote I'm using. Mixing in a few numbers and capital letters also helps and I've been known to throw in punctuation marks if I know the software can handle them.
Matt's suggestion for harvesting would not grab anything too critical from me but I'm quite prepared to believe he'd get a "percentage" of useful passwords owing to the number of dumb buggers who think "secret1" is quite adequate for home and work computers, all forums, "exclusive" pron sites, on-line banking etc etc