[Bug 1036955] VUL-0: CVE-2017-8114: roundcubemail: RCW allows arbitrary password resets by authenticated users