Only doing that won't help. You might as well be transmitting the password, since someone can just copy the hash and then it would be equivalent to having the password. (Also known as a Pass the Hash attack, http://en.wikipedia.org/wiki/Pass_the_hash).

You can send a salted md5 password, which is how I implemented it years ago. The salt is supplied by the server and attached to the session.