Public Dovecot bug reports.

Team Bounty Title
Dovecot $600 Dovecot authentication is vulnerable to timing attacks.
Dovecot - SSL Certification Expired And TLS Vulnerability
Dovecot - Information About Your System(Sensitive Directories)
Dovecot - Directory listing
Dovecot - Web Browser XSS Protection Not Enabled
Dovecot - Outdated Apache Server in www.dovecot.fi is vulnerable to various attack.
Dovecot - Apache version disclosure
Dovecot - DIrectory Listing Found
Dovecot - nginx server vulnerable
Dovecot - Cross-Site Scripting Vulnerability in dovecot.fi