The webmail system Roundcube had several, partly critical, security vulnerabilities. The development team has fixed them and now released the fifth and "hopefully last" candidate for version 1.7.