http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.3 tested by pea@ and myself