| Well if the messages are not encrypted then simple SQL query will list any of the PMs you are interested about. Assuming most of the open source forums are database based. I believe it is the Admin who is responsible for keeping such messages private. However we shouldn't use them for discussing sensitive stuff. Once they are in the system they are available in readable form.
Best,
Frank |