A format string vulnerability exists in Imapproxy versions 1.2.4 and below. Proof of concept exploit included.