uebimiau question

[ozonblue]

Hi.

I'm running ISPconfig on Debian sarge with the perfect setup.

I have experienced strange problems with uebimiau which I installed using the ISPconfig tools button. Visiting the official website creates the impression that the uebimiau web mailer is not actively supported anymore. So please bear with me when I ask these questions here.

Uebimiau works fine on the inbox - but when clicking on some othre directories - Trash for example, you are automatically logged out. When you have the "empty trash folder when you logout" option enabled the browser gets stuck in an infinite loop spiting out php error messages eventually crashing the machine where the browser is running. I have traced the error to an empty file handle passed to a fgets function.

Second question - according to http://pridels.blogspot.com/2006/06/...-xss-vuln.html the latest version of uebimiau is insecure. Does any one know if this holds true or has the version shipping with ISPconfig been fixed ?

kind regards,

Eugene Coetzee