CVE-2012-4668

Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email.

Date published : 2012-08-25

http://sourceforge.net/news/?group_id=139281&id=309011

http://trac.roundcube.net/ticket/1488613