It was only IMAP, not SMTP, so I doubt it. Then again, if they can get this wrong it's not so unlikely that there are more vulnerabilities.