Okay, I'll buy that. Yahoo is a big place, and it's possible that who ever you reported it to, it never got to us.
Zimbra takes security very very seriously. As a matter of fact, many of the products that we use in Zimbra, we use specifically because their competition have security issues.
Considering this issue was reported this morning, we have had little time to post an update, etc.
Zimbra Desktop has an auto-update feature, so when we release the update, all users will be informed.
We don't believe this to be your fault, obviously. We live in a world where security should be #1 for software vendors. For us, it is. A simple yahoo/google search would have brought up how to report security issues.
However, whoever your mentioned it to, should have brought it to our attention, and we're sorry they didn't.
Holden, thanks for reporting this, if you pvt me your address, we'll send you a shirt.
(PS you'll be sending your address in clear text
)