Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

horde groupware webmail edition 4.0 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2012-0909
Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition prior to 4.0.6 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, related to email verification. NOTE: Some of these details are obtained from thir...
Horde Groupware Webmail Edition 4.0.2Horde Groupware Webmail Edition 4.0.1Horde Groupware Webmail Edition 4.0Horde Groupware Webmail Edition 1.2Horde Groupware Webmail Edition 1.1.6Horde Groupware Webmail Edition 1.1.5Horde Groupware Webmail Edition 1.1.4Horde Groupware Webmail Edition 1.0.4Horde Groupware Webmail Edition 1.0.3Horde Groupware Webmail Edition 1.0.2Horde Groupware Webmail Edition 1.0.1Horde Groupware Webmail Edition 1.2.7Horde Groupware Webmail Edition 1.2.6Horde Groupware Webmail Edition 1.2.5Horde Groupware Webmail Edition 1.2.4Horde Groupware Webmail Edition 1.2.3Horde Groupware Webmail Edition 1.1Horde Groupware Webmail EditionHorde Groupware Webmail Edition 4.0.3Horde Groupware Webmail Edition 1.2.9Horde Groupware Webmail Edition 1.2.1Horde Groupware Webmail Edition 1.1.2
4.3
CVSSv2
CVE-2012-0791
Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP prior to 5.0.18 and Horde Groupware Webmail Edition prior to 4.0.6 allow remote malicious users to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compo...
Horde Imp 2.2.7Horde Dynamic Imp 1.1Horde Imp 2.2.5Horde Imp 4.0Horde Dynamic Imp 1.1.6Horde Imp 4.1.3Horde Dynamic Imp 1.1.1Horde Dynamic Imp 5.0.4Horde Imp 4.1.6Horde Imp 5.0.3Horde Imp 3.1Horde Imp 5.0.2Horde Dynamic Imp 5.0.13Horde Imp 4.3.6Horde Dynamic Imp 1.0Horde Dynamic Imp 5.0.5Horde Imp 3.2.4Horde Imp 3.1.2Horde Imp 5.0Horde Imp 4.3.3Horde Imp 4.2Horde Dynamic Imp
4.3
CVSSv2
CVE-2010-3695
Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP prior to 4.3.8, and Horde Groupware Webmail Edition prior to 1.2.7, allows remote malicious users to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_save action, related t...
Horde Imp 4.1.3Horde Imp 4.0.4Horde Imp 2.2.1Horde Imp 4.1.5Horde Imp 4.0.3Horde Imp 2.2.5Horde Imp 4.3.5Horde Imp 4.2.2Horde Imp 4.3Horde Imp 4.3.2Horde Imp 3.2.7Horde Imp 3.2Horde Imp 3.1.2Horde Imp 3.2.2Horde Imp 2.2.2Horde Imp 2.0Horde Imp 4.3.3Horde Imp 3.2.4Horde Imp 3.2.3Horde Imp 2.2.8Horde Imp 3.1Horde Imp 4.0.2
4.3
CVSSv2
CVE-2012-5565
Cross-site scripting (XSS) vulnerability in js/compose-dimp.js in Horde Internet Mail Program (IMP) prior to 5.0.24, as used in Horde Groupware Webmail Edition prior to 4.0.9, allows remote malicious users to inject arbitrary web script or HTML via a crafted name for an attached ...
Horde Imp 5.0.12Horde Imp 5.0.10Horde Imp 5.0.8Horde Imp 5.0.6Horde Imp 5.0.20Horde Imp 5.0.16Horde Imp 5.0.5Horde Imp 5.0.9Horde ImpHorde Imp 5.0.22Horde Imp 5.0.13Horde Imp 5.0.15Horde Imp 5.0.17Horde Imp 5.0.19Horde Imp 5.0.18Horde Imp 5.0.14Horde Imp 5.0.4Horde Imp 5.0.7Horde Imp 5.0.11Horde Imp 5.0.21Horde Groupware 4.0.6Horde Groupware 4.0.5
4.3
CVSSv2
CVE-2012-6640
Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) prior to 5.0.22, as used in Horde Groupware Webmail Edition prior to 4.0.9, allows remote malicious users to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerabi...
Horde Groupware 4.0.7Horde Groupware 4.0.2Horde Groupware 4.0Horde Groupware 4.0.6Horde Groupware 4.0.5Horde Groupware 4.0.4Horde Groupware 4.0.3Horde GroupwareHorde Groupware 4.0.1Horde Imp 5.0.3Horde Imp 5.0.2Horde Imp 5.0.1Horde Imp 5.0.7Horde Imp 5.0.5Horde Imp 5.0.6Horde Imp 5.0.4Horde Imp 5.0Horde Imp 5.0.13Horde Imp 5.0.9Horde Imp 5.0.8Horde Imp 5.0.12Horde Imp 5.0.16
4.3
CVSSv2
CVE-2010-4778
Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP prior to 4.3.8, and Horde Groupware Webmail Edition prior to 1.2.7, allow remote malicious users to inject arbitrary web script or HTML via the (1) username (aka fmusername), (2) password (aka ...
Horde Imp 4.0.3Horde Imp 4.1.6Horde Imp 2.2.5Horde Imp 2.2.6Horde Imp 4.2.2Horde Imp 4.2Horde Imp 3.2.7Horde Imp 4.0Horde Imp 3.2Horde Imp 3.2.2Horde Imp 2.2Horde Imp 2.2.1Horde Imp 2.2.2Horde Imp 3.2.4Horde Imp 3.2.3Horde Imp 3.2.6Horde Imp 3.2.5Horde Imp 4.1.3Horde Imp 4.0.4Horde Imp 2.2.4Horde Imp 4.3.6Horde Imp 2.0
4.3
CVSSv2
CVE-2012-5566
Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4 prior to 3.0.17, as used in Horde Groupware Webmail Edition prior to 4.0.8, allow remote malicious users to inject arbitrary web script or HTML via the (1) tasks view or (2) search view...
Horde Kronolith H4 3.0.11Horde Kronolith H4 3.0.12Horde Kronolith H4 3.0.13Horde Kronolith H4 3.0.14Horde Kronolith H4 3.0Horde Kronolith H4 3.0.1Horde Kronolith H4Horde Kronolith H4 3.0.3Horde Kronolith H4 3.0.8Horde Kronolith H4 3.0.4Horde Kronolith H4 3.0.5Horde Kronolith H4 3.0.6Horde Kronolith H4 3.0.7Horde Kronolith H4 3.0.10Horde Kronolith H4 3.0.15Horde Kronolith H4 3.0.2Horde Kronolith H4 3.0.9Horde Groupware 4.0.6Horde Groupware 4.0.5Horde Groupware 4.0.4Horde Groupware 4.0.3Horde Groupware 4.0.1
4.3
CVSSv2
CVE-2012-5567
Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4 prior to 3.0.18, as used in Horde Groupware Webmail Edition prior to 4.0.9, allow remote malicious users to inject arbitrary web script or HTML via crafted event location parameters in ...
Horde Groupware 4.0Horde Groupware 4.0.3Horde Groupware 4.0.1Horde GroupwareHorde Groupware 4.0.7Horde Groupware 4.0.6Horde Groupware 4.0.5Horde Groupware 4.0.4Horde Groupware 4.0.2Horde Kronolith H4 3.0.16Horde Kronolith H4Horde Kronolith H4 3.0.2Horde Kronolith H4 3.0.3Horde Kronolith H4 3.0.4Horde Kronolith H4 3.0Horde Kronolith H4 3.0.13Horde Kronolith H4 3.0.15Horde Kronolith H4 3.0.6Horde Kronolith H4 3.0.8Horde Kronolith H4 3.0.1Horde Kronolith H4 3.0.10Horde Kronolith H4 3.0.11
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3661open redirectCVE-2024-25512CVE-2024-33788command injectionSSTICVE-2024-0043CVE-2024-29210CVE-2024-25510
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook