Debian Linux Security Advisory 4344-1 - Aidan Marlin discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, is prone to a cross-site scripting vulnerability in handling invalid style tag content.
61088ba4c1524225f61aba788ca2db36974325e1503cca823eabfc5a0b66ce79