Praveen,
1. Yes, 3.7 is GA
2. Users with weak passwords will not have to change their passwords right away as we only do the password requirement check on password creation. They will run into a problem after the default 105 day count has ended.
3. The new 105 day expiration will take effect when you upgrade to 3.7.
Troy