More than 3 million hosts running email services via the POP3 and IMAP protocols don’t have TLS enabled and are vulnerable to all sorts of attacks.

Around 3.3 million servers are running POP3/IMAP email services without encryption (TLS) enabled, the Shadowserver Foundation, a nonprofit security organization, has discovered.