Larry in Zero Day have explained about the issues in G-Archiver, an archiving tool for gmail. According to the article, the program send the user name and password to the authors email.. sounds horrifying right?
The actual source of the article is in coding horror, by Jeff Atwood. Make sure you read the article.!