www.jfileupload.com

Since 2.7 you can enable empty username/password prompt.

Uncomment the following line in i18n_pane.properties:
panel.remote.browse.force=true

And setup the following applet parameters:
<PARAM NAME="authentication" VALUE="auto">
<PARAM NAME="username" VALUE="">
<PARAM NAME="password" VALUE="">
<PARAM NAME="param6" VALUE="disableauth">
<PARAM NAME="value6" VALUE="true">

where can I download 2.7?

nevermind... i guess your talking about java 2.7

No, it's JFileUpload 2.7 which will be available within the next weeks.