I am not 100% sure, but I do not believe the passwords are sent in clear text since it using the Windows authentication mechanism... I could be wrong however. You could install wireshark after you had it set up and sniff the packets to find out.
The other option is to create a secure VPN tunnel between sites and connect the file share that way.