Your single quotes are making it send $password not the value of $password, try this instead.

if(system('/usr/local/bin/AddVirtUser',"tpasswd=$password",
                                           $domain,
                                           $username,
                                           $fullname,
                                           '500',
                                           '1','1','1'
   )){
[download]