How big a group of routers is this? How does one get smart enough to go into the advanced options to enable remote administration, but not smart enough to set the root password first?

I partially blame Tomato for this. It shouldn't allow you to enable remote admin until you've changed the passwords.