Launchpad.net

CVE 2011-4919

mpack 1.6 has information disclosure via eavesdropping on mails sent by other users

See the CVE page on Mitre.org for more details.