If you read several forums, including this one, it's clear that lately a lot of E2-boxes are being hacked. So opening ports, even when password protected, is never a good idea.
There are programs out there, that scan IP's and open ports. It looks like there are also programs scanning specifically for E2-boxes that are opened to the outside world.