eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, which may cause sensitive information to be sent to the wrong recipient.
https://exchange.xforce.ibmcloud.com/vulnerabilities/20088
http://www.securityfocus.com/bid/13137
http://secunia.com/advisories/14940
http://archives.neohapsis.com/archives/bugtraq/2005-04/0157.html