Mail Notification 4.0 when WITH_SSL is set to 0 at compile time uses unencrypted connections for accounts configured with SSL/TLS which allows remote attackers to obtain sensitive information by sniffing the network.