There is a bug in this release which allow an attacker to perform
an SQL injection attack by requesting :
/imp/mailbox.php3?actionID=6&server=x&imapuser=x&pass=x
An attacker may use this flaw to gain unauthorized access to a user
mailbox or to take the control of the remote database.
Solution : Upgrade to the latest version
Risk factor : High
