https://bz.apache.org/ooo/show_bug.cgi?id=116295
--- Comment #7 from Andreas Säger <[email protected]> --- menu:File>Send>... calls the installed mail client to start a new email with the current document attached. If the password is stored anywhere, it is stored in the mail client where it is not our business. > http://www.openoffice.org/api/docs/common/ref/com/sun/star/text/MailMerge.html#OutServerPassword You can derive multiple text documents from a serial letter (menu:Tools>MailMergeWizard) and send them either to a printer, to files or to a built-in simple mail client. AOO stores one or two mail server passwords when you finish the mail merge wizard in email mode. The password can be used to send _arbitrary_ mail through another persons mail server. In certain cases (SMPT after POP) AOO also prompts for the ingoing mail password. Then you find everything to send and receive another persons mail in the AOO registrymodifications.xml which is a perfect opportunity for identity theft. Quick solution: always prompt for the password. -- You are receiving this mail because: You are on the CC list for the issue. You are the assignee for the issue.
