--- smtp.c	2005-12-20 01:47:50.000000000 +0100
+++ smtp.c.oden	2008-12-20 19:20:43.000000000 +0100
@@ -55,7 +55,7 @@ static void SMTP_auth_error(int sock, co
 {
     SockPrintf(sock, "*\r\n");
     SockRead(sock, smtp_response, sizeof(smtp_response) - 1);
-    if (outlevel >= O_MONITOR) report(stdout, msg);
+    if (outlevel >= O_MONITOR) report(stdout, "%s", msg);
 }
 
 static void SMTP_auth(int sock, char smtp_mode, char *username, char *password, char *buf)
--- pop3.c	2007-03-18 02:13:45.000000000 +0100
+++ pop3.c.oden	2008-12-20 19:22:57.000000000 +0100
@@ -758,7 +758,7 @@ static int pop3_gettopid(int sock, int n
     int got_it;
     char buf [POPBUFSIZE+1];
     snprintf(buf, sizeof(buf), "TOP %d 1", num);
-    if ((ok = gen_transact(sock, buf )) != 0)
+    if ((ok = gen_transact(sock, "%s", buf )) != 0)
        return ok;
     got_it = 0;
     while ((ok = gen_recv(sock, buf, sizeof(buf))) == 0)