if someone knows my icloud password what can they see?

Everything you can see, unless you have set up two-factor or two-step authorisation, in which case they can only get in with the code sent to one of your 'trusted devices'. If you think someone knows your password, change it (before they do).