Yes, you could use "zmprov sp
user@domain.com newpassword" to reset the password for a user through a web page. You just need to make sure that the page can properly call zmprov.
It might be better to use the SOAP API (search forums and see wiki), since it is a bit faster and you don't have to risk the security of executing powerful commands from a script.