Multiple buffer overflows in the DBMail driver in the Password plugin in Roundcube before 1.1.0 allow remote attackers to have unspecified impact via the (1) password or (2) username.
- https://github.com/roundcube/roundcubemail/issues/4757
No PoCs found on GitHub currently.