1. Go to the profile page of the person whose album is locked.
2. View html source of the page and search for 'medium'
3. This will give you an url like http://img<2,3 or 4>.orkut.com/images/medium/
4. Open another tab paste this url and replace 'medium' with 'milieu/1'(http://img3.orkut.com/images/milieu/2/
5. To view other pictures in the album change the 'milieu/1' to 'milieu/2' and so on till you have seen all the pictures.
Security blunder of this magnitude was not expected from google!