cmd_parse_list() already calls imap_unmunge_mbox_name() on the mailbox
names returned from the server. However, browse_add_list_result() was
taking those mailbox names and passing them to imap_add_folder(), which
was calling imap_unmunge_mbox_name() yet again.
The reason is that imap_browse() was directly calling imap_add_folder()
too, passing in a previously encoded "mbox" name. After looking
carefully at the code, I could find no reason that mbox needed to
be encoded outside of the LIST commands.. Therefore I changed
imap_browse() to call imap_munge_mbox_name() on mbox for the
two LIST commands generated from it instead, and removed the
imap_unmunge_mbox_name() call inside imap_add_folder().