[SQL injecton vulnerabilities in vpopmail prior to 5.4.6]
see http://archives.neohapsis.com/archives/bugtraq/2004-08/0286.html
maintainer says does not apply to debian, see #320608