BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments.
https://exchange.xforce.ibmcloud.com/vulnerabilities/9387
http://www.securityfocus.com/bid/5065
http://online.securityfocus.com/archive/1/277710
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html