Qbik WinGate format string vulnerability

Unsafe vsprintf call on invalid SMTP command...