It appears that both Horde and Roundcube leak username and password credentials by sending them base64 encoded with every POST.
97b08619867c34b35aec04024d165af4b305d0dd191b1b372d1902b28ac961e4
© 2022 Packet Storm. All rights reserved.