The password management features of most popular web browsers are riddled with bugs, new research concludes.