First the user can reset his email and / or resend his confirmation email (if he has never confirmed his email) via the user account settings.
What happen if the user has forgot his password and never confirmed his email?
Now the user tries to recover his password via the password recovery function but is told that his email never has confirmed and therefore he can't get an email.
1. you can empty the field '##email_confirm##' in the '##user##' table for this user so he can reset his password by his own via email
2. [via Admin panel - have to look into this - answer later]