Allaire Forums 2.0.5 software may allow users to view and post to secure discussion threads via unsecured conferences and/or through email. This issue affects multiple templates in the Forums software. Updated versions of the affected templates are available from the included link.
We had hoped to have the full review of this security problem, done by Cameron Childress, out before Allaire's announcement. Cameron has been VERY busy, and hasn't been able to finish his review yet, but you can look forward to it in a future issue of Fusion Authority. It will cover this and other forums holes that have been found.