Ongoing security problem

[litlfrog]

Every couple of months we have an angry customer call in saying that they went to our webmail page online only to see the e-mail of a different user. We're probably going to be losing customers over this unless I convince our mail administrator to find a fix for the problem or replace RoundCube with something else. Can anyone point me in a direction to resolve this serious problem?