Debian Linux Security Advisory 5531-1 - It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not properly sanitize HTML messages. This would allow an attacker to load arbitrary JavaScript code.
961824a129d751981518c8ecfbe654d441e2922aec3a9645d77dae20b42b7ecd