Overview:

Passwords for e-mail accounts are stored in clear text in the /home/user_name/.config/xfce4/panel/mailwatch which is a security risk

Steps to Reproduce:

1) Configure one or more e-mail accounts, logout and relogin (last two steps may not be necessary)

2) Navigate to ~/.config/xfce4/panel/, and see the contents of mailwatch-[string_of_numbers].rc

Actual Results:

Passwords for every mail account are displayed without any sort of encryption

Expected Results:

Passwords should be masked with some sort of encryption or not be there at all. I do not know if mailwatch can expect to have the OS provide a specific keychain-like central encrypted password storage service.

Version:
Xfce 4 Mailwatch Plugin 1.1.0 on Xfce 4.6.1