for details, see http://www.mozilla.org/projects/security/known-vulnerabilities.html#Thunderbird from Martynas Venckus