Unfortunately upstream considers it fixed now, but they don't offer a good upgrade path.
-- connecting to pop servers without TLS support sends clear password https://launchpad.net/bugs/51037 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs