[horde] Phising despite latest CVS?

[Jan Johansson]

I am running an up to date HEAD

  	    	 Status
Adressbok (turba) H3 (2.1.1-cvs)
Anteckningar (mnemo) H3 (2.1.1-cvs) 
E-post (imp) H3 (4.1.2-cvs) 		
Filter (ingo) H3 (1.1.1-cvs) 		
Horde (horde) 3.1.2-cvs 		
Kalender (kronolith) H3 (2.1.2-cvs) 		
Lösenord (passwd) H3 (3.0.1-cvs) 		
Mobil e-post (mimp) H3 (1.0-cvs) 		
Uppgifter (nag) H3 (2.1.1-cvs) 		

And yeat, i seem to be used for phising, the below file shows up 

/var/www/webmail.skyddsrummet.net/horde/services/help/ws/eBayISAPIdllSignInfavoritenav=2sid2=ruproduct=pp=co_partnerId=2ru=i1=ruparams=pageType=pa2=bshowgif=pa1=pUserId=errmsg=UsingSSL-runame-iteid=0/SignIn.htm

I killed it off, updated my installation (which before was Pre-March 28), but a day later it is back.

WHtas going on, and how do I stop it?