Security

Core of surgemail is NOT affected as PHP is not used. If sabredav calendaring is enabled (or g_web_php_exe is set)...