Short answer: It's broken. Here is the document that describes the problem at their site.
Long answer from the OpenSSL group: http://www.openssl.org/~bodo/tls-cbc.txt
Update: Eudora for MacOS X seems to work well, so this issue probably applies only to Windows and older MacOS versions.