Am I correct in thinking that the recent issues with Smartermail all relate to the webmail interface?

And if so, presumably if we don't have this enabled ( or put it behind Windows Authentication ) then none of the issues will affect us?

Unfortunately we're not currently in a position to pay and upgrade to the latest version, so in the meantime need to find a solution to secure the existing version for now.

Many thanks