In Alpine prior to 2.25, untagged responses from an IMAP server are accepted before STARTTLS.
alpine project alpine