Hi, there's a CERT out with securitytips that is quite nice. Se: http://www.cert.org/tech_tips/usc20_full.html#9.1
On po/imap it only states: make sure you run the latest version. How about making them say: Change to cyrus for added security ? Tarjei