Sorry...  I see this was mentioned, just a little down the page.

I'll be sure to check more thoroughly next time.

I hope I'm not the first person to make a post here about this: http://www.securityfocus.com/bid/36797/info

Pegasus Mail is prone to a remote buffer-overflow vulnerability because it fails to properly sanitize user-supplied input.

An attacker may exploit this issue to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will likely result in a denial-of-service condition.

Pegasus Mail 4.51 is vulnerable; other versions may also be affected.

Regards

Stuart