Tilman,
to avoid entering password for cvs actions that don't modify the repository (cvs status, cvs log, cvs diff, cvs annotate etc.) you could use an alias such as

alias cvsanon="cvs -d :pserver:anonymous@openacs.org:/cvsroot"