You have to declare a string containing the call, then execute:

    cExec = "call sp_change_password('" + password + "','" + id_user + "') ;"
    EXECUTE IMMEDIATE :cExec ;