If "attach" and "attach.exe" co-exist in message and "attach" is clicked, "attach.exe" will be silently executed instead.
vulners.com/securityvulns/securityvulns:doc:4584
vulners.com/securityvulns/securityvulns:doc:5113
vulners.com/securityvulns/securityvulns:doc:5460
vulners.com/securityvulns/securityvulns:doc:6456
vulners.com/securityvulns/securityvulns:doc:6962
vulners.com/securityvulns/securityvulns:doc:7181