IMail stores usernames and passwords in cleartext in a cookie, which allows remote malicious users to obtain sensitive information.
ipswitch imail 2006