Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users.
http://www.securityfocus.com/bid/15227
http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml
http://www.debian.org/security/2005/dsa-905
http://secunia.com/advisories/17654
http://secunia.com/advisories/17362