The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set.
https://exchange.xforce.ibmcloud.com/vulnerabilities/5762
http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-081.php3