Roundcube CVE-2013-5646. Closes #14.