I’m not exactly sure what flaws lie within RoundCube, but I see a lot of hits trying to find a way in based on roundcube. If you have a site that uses RoundCube for your imap or webmail client, be sure to check your server logs for unauthorized access. Its important to note, spammers are trying to use these as jump points into a server, so make sure your installation is secured and check your logs, not just your error logs.

