[Email header injection via bare CR in the subject field]
Fixed by: https://github.com/roundcube/roundcubemail/commit/73d864e06cb26000a37ad57ae439842a85b6690e (1.6.19)
