Apple released a Security Software Update yesterday that (among other things) includes fixes to Mail.app, including closing the hole I found a while ago. I'm very glad Apple fixed this quickly.

It's also pretty nice of them to give me credit for reporting the bug... I'm credited for reporting one of them on Macintouch (somehow).