diff --git a/extensions/mail/mail-lib.pl b/extensions/mail/mail-lib.pl
index 4ac54af50..0a2e51631 100644
--- a/extensions/mail/mail-lib.pl
+++ b/extensions/mail/mail-lib.pl
@@ -140,7 +140,7 @@ sub folders_select
             $offset++;
         } else {
             utf8::decode($f->{'name'}); utf8::encode($f->{'name'});
-            push(@opts, [$id, $f->{'name'}]);
+            push(@opts, [$id, html_escape($f->{'name'})]);
         }
     }
     return ui_select(undef, undef, \@opts);