remember-me cookie

Is storing a password in a remember-me cookie a security risk?

A remember-me feature appears to put a recoverable password in a browser cookie. Is that harmful if the cookie is stored locally, and what should the site use…