≥ 2.0.2, ≤ 2.1.1
Fleet before 2.1.2 allows exposure of SMTP credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.