If you don't have a /my-plugins/ directory in your bbpress installaltion, create it on the same level as config.php.
Upload the file into /my-plugins/ directory
It is probably best to autoload the plugin by prepending an underscore "" to the filename. i.e. rename the file to "md5-insecurity-for-bbpress.php"