The messaging box throws an Oracle error when trying to list contacts:

ORA-00911: invalid character

this is due to semi-colons ; added to SQL, oracle does not like these.

with bug reporting turned off the contact list is just shown as empty even if contacts have been added.

Fix: edit /message/lib.php and remove ; from SQL

Edit /message/lib.php:

line 52:

• ORDER BY u.firstname ASC;";
  + ORDER BY u.firstname ASC";

line 82:

• ORDER BY u.firstname ASC;";
  + ORDER BY u.firstname ASC";

Corrected lib.php is attached.