The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set.
https://exchange.xforce.ibmcloud.com/vulnerabilities/5762
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-0067
http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-081.php3