Apple Mail.app 3.5 on Mac OS X when \Store draft messages on the server\ is enabled stores draft copies of S/MIME email in plaintext on the email server which allows server owners and remote man-in-the-middle attackers to read sensitive mail.