The URL in the href of the link should show with
& when you view the HTML source code. However, it should show as a plain ampersand in the browser address bar after that link is clicked.
Is the page being sent with the correct character set encoding? Use the Live HTTP Headers extension for Firefox to check the HTTP Headers returned.
Is the ampersand perhaps double-encoded
&amp; in the HTML source code?