Email

Roundcube

Roundcube - Free webmail for the masses. Roundcube webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client including MIME support address book folder manipulation message searching and spell checking.

Official Site:

https://roundcube.net/

Severity Summary:

Critical: 8 High: 17 Medium: 49 Low: 6

Reference

Title

Severity

CVE-2013-5645

Roundcube Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2012-6121

Roundcube Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2012-4668

Roundcube Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2015-1433

Roundcube Cross-site Scripting (XSS) Vulnerability

Medium

CVE-2018-19206

Roundcube Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2011-4078

Roundcube Resource Management Errors Vulnerability

Medium

CVE-2011-2937

Roundcube Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2011-1492

Roundcube Improper Input Validation Vulnerability

Medium

CVE-2020-35730

Roundcube Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2010-0464

Roundcube Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Medium

CVE-2012-3508

Roundcube Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2009-4077

Roundcube Cross-Site Request Forgery (CSRF) Vulnerability

Medium

CVE-2009-4076

Roundcube Cross-Site Request Forgery (CSRF) Vulnerability

Medium

CVE-2009-0413

Roundcube Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2015-8105

Roundcube Cross-site Scripting (XSS) Vulnerability

Low

CVE-2026-35538

Roundcube Improper Neutralization of Argument Delimiters in a Command (Argument Injection) Vulnerability

Low

CVE-2011-1491

Roundcube Improper Input Validation Vulnerability

Low

CVE-2012-1253

Roundcube Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Low

CVE-2012-3507

Roundcube Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Low

CVE-2026-48842

Roundcube Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vuln

Low