Horde library 1.02 allows malicious users to execute arbitrary commands via shell metacharacters in the "from" address.
horde horde 1.2