Are you saving the attachments to the local HDD first? This is a security
requirement to make sure that what is displayed by the attachment is truly
what it is (not something like docname.doc.exe, where the exe is hidden) and
to make sure that the Anti Virus gets to scan it before it is opened.