Downloading the ZIP package works indeed.
The single file downloads, however, don’t. They show the “link expired” message.
To reproduce:
* enter the password in password box on the left of the green download button, e.g. Security Report 2015
* click the green download button
=► link expired text.
NOTE: if I enter a wrong password in the box, the box gets a red border so password checking is working.