why did the capturing of traffic take ceh ceh

What aspect of email clients does this exploit take advantage of?