Bugs in Thunderbird are (maybe it's just how I see it) found less often than in Firefox (or maybe there are just fewer places where programmers can make a bug). This time, we have something rated by Secunia as 'extremaly critical'. The bug is rather standard: wrong method of parsing user input.
There's an updated version, 1.0.7. Download recommended.