Fix for older XPConnect

There was a necessary QueryInterface for Postbox to recognize timer
when waiting for mail window to appear.
Escaping XML-RPC string values

& -> &amp; and < -> &lt;