Hi!
There's a ticket http://trac.roundcube.net/ticket/1487001 So, when user uses empty password error to the log is printed.
I was thinking... Is any reason to do login when password is empty? In my opinion, we should just skip (IMAP) login process when password is not provided and return false from rcube_imap::connect() without printing an error to the log.