Couldn't a SSL-terminating process that's vulnerable to heartbleed also leak unencrypted traffic? The attacker wouldn't even need to be in a position to intercept other users' connections, which is much worse.

I don't know about stunnel specifically though, maybe it doesn't free memory containing unencrypted traffic.