Concern about alias of other hosted account.

[AlexisS]

Hi,

I'm concerned about an operation I was able to perform inside Plesk 10.

I've set up two different account. One we'll call plane.com, the other shoe.com
Both accounts are owned by different users ("Customers inside Plesk")

On my shoe.com Control Panel, inside Aliases, I've entered small.plane.com
And it worked ! Now if I visit the URL small.plane.com (That the user has normally no right to it) I see the content hosted inside the normal shoe.com account.

How is that possible ? That's a major fail for the security of all account.
Is that evitable ?

Regards,