How to integrate a PHP webmail script into the backend of WordPress?
You could register a custom menu page and then use an iframe for the webmail as an output for this. To secure your /webmail URL you can set access-controls within your .htaccess file to only allow your website address to access the path.