Launchpad.net

CVE 2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a (1) COPY or (2) APPEND command.

See the CVE page on Mitre.org for more details.