Funny, a couple days ago the title was "Huawei spied on Dutch bla bla". Today it's "may have spied". The original article (well, the translation bondarchuk posted here) says they had the access. Not that they did anything with it.
They had unauthorized access, which means they used it. It's not clear for what currently, that's why it describes the scope of access.
They also found that the application can tap entire phone calls, which was forbidden.
Edit:
What do you think the following means ( Dutch is my native tongue, lol):
> ‘Ongecontroleerde en ongeautoriseerde toegang vanuit China heeft na 28 oktober 2009 daadwerkelijk plaatsgevonden’, vermeldt het rapport in april 2010.
Translation: Unchecked and unauthorized access has taken place from china after 28 October 2009.
Original article: http://webcache.googleusercontent.com/search?q=cache:https:/...