At our place it was email clients using whatever is the default encoding of Windows to encode passwords. Usually not UTF-8, like every other piece of software using that password.