Plugins using date('U') or time() may have been expecting a timezone offset in previous versions of WordPress, and depending on the server setup this was true. This has changed in 3.0. We now tell PHP to not factor in timezones to ensure maximum portability across PHP versions and server setups, thus you’ll end up with UTC time when using those functions.
Use current_time('timestamp') to get the Unix timestamp with a timezone offset.
Best should be to clean up code in
wp-login.php
$user_login = $user_data->user_login;
$user_email = $user_data->user_email;
and in wp-pluggable.php (several times)
$user_login = stripslashes($user->user_login);
$user_email = stripslashes($user->user_email);