My all time favorite has to be a straight to desktop bug I stumbled across in IRIX 6.2. If the screen is locked and has external SCSI devices you don't have to remember your password. Just disconnect the device from the machine and after a little reassurance you have access to the desktop.

Xlock never comes back after you tell the dialog that you realize something has gone away.