Recently it was announced that the Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows a remote code execution vulnerability (see CVE-...