diff --git a/mailboxes/folders-lib.pl b/mailboxes/folders-lib.pl
index 115e41031..998099d79 100755
--- a/mailboxes/folders-lib.pl
+++ b/mailboxes/folders-lib.pl
@@ -2533,7 +2533,7 @@ foreach my $f (@$folders) {
 			}
 		}
 	push(@opts, [ $byid ? &folder_name($f) : $f->{'index'},
-		      $f->{'name'}.$umsg ]);
+		      &html_escape($f->{'name'}).$umsg ]);
 	}
 return &ui_select($name, $byid ? &folder_name($folder) : $folder->{'index'},
 		  \@opts, 1, 0, 0, 0, $auto ? "onChange='form.submit()'" : "");