my users found another bug: If a username contains special chars (Umlaute), then it is not possible to send a Private message via
index.php?option=com_uddeim&task=new&recip=<id>
This method is used in Kunena if you want to use the button below user avatar in forum to directly send a message. Problem lies with function uddeIMdrawWriteform which creates the form for a new message. $recipname is read from Joomla user base and is already properly coded. Recoding it with htmlentities destroys the proper coding of special chars and thus the recipient username is wrong.