thunderbird: multiple vulnerabilities

It's a bit of a shock that Thunderbird has a video library at all - apparently it was added in 3.0. I can't think of a real use case for video embedding, particularly since most email clients don't support this and you would need to provide a URL anyway. So the main user base for this 'feature' will probably be those attacking the email client.

At least video requires a right-click menu option to play, but that's not much of a barrier to spammers/hackers: https://developer.mozilla.org/en/Thunderbird_3_for_users