Roundcube is probably the prettiest option, but I'm curious about their security record. I definitely see http scanners looking for specific versions of it very often.

I just setup a mail server on my new slice yesterday and after a few hours of research I settled on RoundCube as well.