"If you think that you have found a security issue in vmail.me project, please don't use the bug tracker and don't publish it publicly.

Instead, all security issues must be sent to support [at] vmail.me."