Netscape 7.0 and Mozilla 5.0 do not immediately delete messages in the trash folder when users select the 'Empty Trash' option, which could allow local users to access deleted messages.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2003-1255
http://www.securitytracker.com/id?1005871
http://www.securityfocus.com/bid/6499
http://www.iss.net/security_center/static/10963.php
http://archives.neohapsis.com/archives/bugtraq/2002-12/0277.html