Heartbleed exposes a threat where computer memory for a vulnerable could be exposed.
Consider an adversary with access to all cipher text input and output of your server (ISP, government, local network peers). If they had access to previous HTTPS communications (yesterday, a year ago) on your server and now get access to its memory, would they be able to decrypt past messages?