Free and open source webmail software for the masses, written in PHP

Roundcube Webmail

Roundcube Webmail

  -  6.1 MB  -  Open Source
  • Latest Version

    Roundcube Webmail 1.7.2 LATEST

  • Review by

    Juan Garcia

  • Operating System

    Windows 7 / Windows 8 / Windows 10 / Windows 11

  • User Rating

    Click to vote
  • Author / Product

    Roundcube Team / External Link

  • Filename

    roundcubemail-1.7.2-complete.tar.gz

Roundcube Webmail is a free browser-based multilingual IMAP client with an application-like user interface.

It provides full functionality you expect from an email client, including MIME support, address book, folder manipulation, message searching, and spell checking.

This project is a free and open-source webmail solution with a desktop-like user interface that is easy to install/configure and that runs on a standard LAMPP server.

The skins use the latest web standards to render a functional and customizable UI.

Roundcube Webmail includes other sophisticated open-source libraries such as PEAR, an IMAP library derived from IlohaMail the TinyMCE rich text editor, Googiespell library for spell checking, or the WasHTML sanitizer by Frederic Motte.

Features and Highlights
  • Intuitive drag-and-drop message organization
  • Full support for MIME and HTML email formats
  • Manage multiple sender identities with ease
  • Comprehensive address book with group support and LDAP integration
  • Instant address lookup with find-as-you-type functionality
  • Organized, threaded message view
  • Support for IDNA and SMTPUTF8 internationalized email standards
  • Built-in spell checker
  • Responsive design for seamless use across devices
  • Shared and global IMAP folder support
  • Access control list (ACL) support for folder permissions
  • Smart caching system for fast mailbox access
  • Scales effortlessly to handle unlimited users and messages
  • Import and export tools for data portability
  • Plug-in API for easy customization and extension
  • Robust protection against cross-site scripting (XSS) attacks
  • PGP encryption support for secure communication
How to Use
  • Install a local web server (e.g., XAMPP or WAMP)
  • Extract Roundcube into the web server's root directory
  • Create a MySQL database for Roundcube
  • Run the Roundcube installer via browser
  • Configure IMAP/SMTP settings
  • Log in using your email credentials
System Requirements

Windows 7, 8, 10, or 11

PHP 7.3 or higher

MySQL or PostgreSQL database

Apache or compatible web server

200MB free disk space

1GB RAM minimum

PROS
  • User-friendly webmail interface
  • Supports IMAP email access
  • Open-source and customizable
  • Extensive plugin support
  • Multi-language support
CONS
  • No native desktop installer
  • Requires manual server setup
  • Limited support for POP3
  • No built-in calendar or tasks
  • Can be complex for beginners


Why is this app published on FileHorse? (More info)
  • Roundcube Webmail 1.7.2 Screenshots

    The images below have been resized. Click on them to view the screenshots in full size.

    Roundcube Webmail 1.7.2 Screenshot 1
  • Roundcube Webmail 1.7.2 Screenshot 2
  • Roundcube Webmail 1.7.2 Screenshot 3
  • Roundcube Webmail 1.7.2 Screenshot 4
  • Roundcube Webmail 1.7.2 Screenshot 5

What's new in this version:

- Add HEAD request handler to the static.php

Fixed:
- Fix so the oauth_password_claim claim is retrieved via token or userinfo request
- Fix bug where static.php would return a 416 error on a specific Range request
- Fix bug where configured skin logo wasn't loaded via static.php resulting in 404 error
- Fix bug where installto.sh would fail if public_html folder does not exist in the target directory
- Revert "Prefer 8bit over quoted-printable for HTML parts, when force_7bit is disabled
- Fix incorrect unfolding of folded lines when importing vCard 2.1 contacts
- Fix bug where Imagick could leave large temporary files on failure
- Fix bug where redis/memcache session could have been updated more often than needed
- Fix support for untyped tokens in OIDC backchannel logout, require unset nonce
- Security: Fix an infinite loop in TNEF (winmail.dat) decoder
- Security: Fix various vulnerabilities in the password plugin using session-injected username
- Security: Fix stored XSS via unescaped attachment MIME type on the attachment-validation warning page [CVE-2026-54432]
- Security: Fix SSRF bypass via specific local address URLs - two new cases
- Security: Fix zero-click stored XSS in plain-text rendering [CVE-2026-54433]
- Security: Fix DoS via crafted compressed-RTF size in the TNEF (winmail.dat) file