Symantec Brightmail Anti-Spam 6.x suffers from a flaw where malicious users can read arbitrary mails.