I'm loving Roundcube, installation and configuration is a breeze, and the interface is elegant. I just installed it today and plan to get some good use from it . I've also started poking at it to find any security issues I can. What's the preferred method for me to submit security bugs such as XSS?