3 files changed, 3 insertions, 3 deletions
diff --git a/pop3.c b/pop3.c
index 14cfde82..7e7757d2 100644
--- a/pop3.c
+++ b/pop3.c
@@ -771,7 +771,7 @@ static int pop3_gettopid(int sock, int num , char *id, size_t idsize)
     int got_it;
     char buf [POPBUFSIZE+1];
     snprintf(buf, sizeof(buf), "TOP %d 1", num);
-    if ((ok = gen_transact(sock, buf )) != 0)
+    if ((ok = gen_transact(sock, "%s", buf)) != 0)
        return ok;
     got_it = 0;
     while ((ok = gen_recv(sock, buf, sizeof(buf))) == 0) 
diff --git a/report.c b/report.c
index 851f7dd1..fa1ce4ad 100644
--- a/report.c
+++ b/report.c
@@ -274,7 +274,7 @@ void report_flush(FILE *errfp)
     if (partial_message_size_used != 0)
     {
 	partial_message_size_used = 0;
-	report(errfp, partial_message);
+	report(errfp, "%s", partial_message);
 	partial_suppress_tag = 1;
     }
 }
diff --git a/smtp.c b/smtp.c
index 2517d15a..96a708e3 100644
--- a/smtp.c
+++ b/smtp.c
@@ -55,7 +55,7 @@ static void SMTP_auth_error(int sock, const char *msg)
 {
     SockPrintf(sock, "*\r\n");
     SockRead(sock, smtp_response, sizeof(smtp_response) - 1);
-    if (outlevel >= O_MONITOR) report(stdout, msg);
+    if (outlevel >= O_MONITOR) report(stdout, "%s", msg);
 }
 
 static void SMTP_auth(int sock, char smtp_mode, char *username, char *password, char *buf)