Takeshi Terada discovered a vulnerability in PHPMailer, a PHP library for
email transfer, used by many CMSs. The library accepted email addresses
and SMTP commands containing line breaks, which can be abused by an
attacker to inject messages.