CVE-2012-1257 on Ubuntu 12.04 LTS (precise) - low.
Description:
Pidgin transmits OTR (off-the-record) conversations over DBUS in plaintext. This makes it possible for attackers that have gained user-level access on a host, to listen in on private conversations associated with the victim account.