I posted this to another message, but I have not seen any talk on the relay bug in the POP Before SMTP .pkg from Cobalt.

Here is a link to a message talking about a fix for POP Before SMTP

http://list.cobalt.com/pipermail/cobalt-security/2001-July/002689.html