Free and open source webmail software for the masses, written in PHP

Roundcube Webmail

Roundcube Webmail

  -  6.1 MB  -  Open Source
  • Latest Version

    Roundcube Webmail 1.7.3 LATEST

  • Review by

    Juan Garcia

  • Operating System

    Windows 7 / Windows 8 / Windows 10 / Windows 11

  • User Rating

    Click to vote
  • Author / Product

    Roundcube Team / External Link

  • Filename

    roundcubemail-1.7.3-complete.tar.gz

Roundcube Webmail is a free browser-based multilingual IMAP client with an application-like user interface.

It provides full functionality you expect from an email client, including MIME support, address book, folder manipulation, message searching, and spell checking.

This project is a free and open-source webmail solution with a desktop-like user interface that is easy to install/configure and that runs on a standard LAMPP server.

The skins use the latest web standards to render a functional and customizable UI.

Roundcube Webmail includes other sophisticated open-source libraries such as PEAR, an IMAP library derived from IlohaMail the TinyMCE rich text editor, Googiespell library for spell checking, or the WasHTML sanitizer by Frederic Motte.

Features and Highlights
  • Intuitive drag-and-drop message organization
  • Full support for MIME and HTML email formats
  • Manage multiple sender identities with ease
  • Comprehensive address book with group support and LDAP integration
  • Instant address lookup with find-as-you-type functionality
  • Organized, threaded message view
  • Support for IDNA and SMTPUTF8 internationalized email standards
  • Built-in spell checker
  • Responsive design for seamless use across devices
  • Shared and global IMAP folder support
  • Access control list (ACL) support for folder permissions
  • Smart caching system for fast mailbox access
  • Scales effortlessly to handle unlimited users and messages
  • Import and export tools for data portability
  • Plug-in API for easy customization and extension
  • Robust protection against cross-site scripting (XSS) attacks
  • PGP encryption support for secure communication
How to Use
  • Install a local web server (e.g., XAMPP or WAMP)
  • Extract Roundcube into the web server's root directory
  • Create a MySQL database for Roundcube
  • Run the Roundcube installer via browser
  • Configure IMAP/SMTP settings
  • Log in using your email credentials
System Requirements

Windows 7, 8, 10, or 11

PHP 7.3 or higher

MySQL or PostgreSQL database

Apache or compatible web server

200MB free disk space

1GB RAM minimum

PROS
  • User-friendly webmail interface
  • Supports IMAP email access
  • Open-source and customizable
  • Extensive plugin support
  • Multi-language support
CONS
  • No native desktop installer
  • Requires manual server setup
  • Limited support for POP3
  • No built-in calendar or tasks
  • Can be complex for beginners


Why is this app published on FileHorse? (More info)
  • Roundcube Webmail 1.7.3 Screenshots

    The images below have been resized. Click on them to view the screenshots in full size.

    Roundcube Webmail 1.7.3 Screenshot 1
  • Roundcube Webmail 1.7.3 Screenshot 2
  • Roundcube Webmail 1.7.3 Screenshot 3
  • Roundcube Webmail 1.7.3 Screenshot 4
  • Roundcube Webmail 1.7.3 Screenshot 5

What's new in this version:

- OAuth: Don't log an error when a refreshed token's TTL is below refresh_interval

Fixed:
- Fix out-of-bounds string reads on truncated compressed-RTF in the TNEF decoder
- Fix bug where searching in example_addressbook plugin was reporting zero results despite matches
- Fix vCard import mis-detecting folded continuation lines as BEGIN/END:VCARD
- Fix bug where the php session driver practically disabled session.lazy_write optimization
- Fix bug where dates could get displayed shifted back one day in some places
- Fix regression where it wasn't possible to hide a skin logo image anymore
- Fix decoding of multi-segment RFC2231 extended attachment filenames
- Fix vCard import silently dropping properties with a non-item group prefix
- Fix so REQUEST_URI is used as a fallback if PATH_INFO is empty in static.php

- Security: Add basic validation for content proxied by the css proxy
- Security: Fix SSRF bypass via specific local address URLs using 100.64.0.0/10 and fe80::/10 nets
- Security: Fix SSRF filter bypass via various forms of nip.io/sslip.io hostnames evading is_local_url() check
- Security: Fix remote content blocking bypass via unclosed url() in a FuncIRI attribute
- Security: Fix LDAP filter injection via unescaped %u/%fu/%d substitution into the search_filter
- Security: Fix arbitrary Sieve script injection via a filter rule name bypassing managesieve_disabled_actions
- Security: Fix RCE via cmd_learn driver of markasjunk plugin
- Security: Fix IMAP command injection via mail search and LITERAL+ byte-count desynchronization
- Security: Fix password's modoboa driver leak of an authentication token to a user-controlled host
- Security: Fix stored XSS in "Add to address book" action
- Security: Fix HTML/CSS sanitization bypass via SVG animate by attribute