Log in using the old password and you'll be given a chance to change the password. That involves answering the security questions only you should know.
They will either send an e-mail to the other address you should have given them, or complete the process online if you didn't give them an alternative.