Related: RainLoop (of which SnappyMail is a fork) seems to be no longer developed and has a known stored XSS problem: https://blog.sonarsource.com/rainloop-emails-at-risk-due-to-...
SnappyMail is not affected by this and seems to be the successor.
SnappyMail is not affected by this and seems to be the successor.