Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

horde groupware webmail edition vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2012-0909
Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition prior to 4.0.6 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, related to email verification. NOTE: Some of these details are obtained from thir...
Horde Groupware Webmail Edition 4.0.2Horde Groupware Webmail Edition 4.0.1Horde Groupware Webmail Edition 4.0Horde Groupware Webmail Edition 1.2Horde Groupware Webmail Edition 1.1.6Horde Groupware Webmail Edition 1.1.5Horde Groupware Webmail Edition 1.1.4Horde Groupware Webmail Edition 1.0.4Horde Groupware Webmail Edition 1.0.3Horde Groupware Webmail Edition 1.0.2Horde Groupware Webmail Edition 1.0.1Horde Groupware Webmail Edition 1.2.7Horde Groupware Webmail Edition 1.2.6Horde Groupware Webmail Edition 1.2.5Horde Groupware Webmail Edition 1.2.4Horde Groupware Webmail Edition 1.2.3Horde Groupware Webmail Edition 1.1Horde Groupware Webmail EditionHorde Groupware Webmail Edition 4.0.3Horde Groupware Webmail Edition 1.2.9Horde Groupware Webmail Edition 1.2.1Horde Groupware Webmail Edition 1.1.2
9
CVSSv2
CVE-2008-3650
Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related to "unescaped output," possibly cross-site scripting (XSS), in the (1) object browser and (2) contact view.
Horde Groupware Webmail Edition 1.0Horde Groupware Webmail Edition 1.0.1Horde Groupware Webmail Edition 1.0.4Horde Groupware Webmail Edition 1.0.5Horde Groupware Webmail Edition 1.0.6Horde Groupware Webmail Edition 1.0.7Horde Groupware Webmail Edition 1.1Horde Groupware Webmail Edition 1.0.2Horde Groupware Webmail Edition 1.0.3
4.3
CVSSv2
CVE-2012-0791
Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP prior to 5.0.18 and Horde Groupware Webmail Edition prior to 4.0.6 allow remote malicious users to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compo...
Horde Imp 2.2.7Horde Dynamic Imp 1.1Horde Imp 2.2.5Horde Imp 4.0Horde Dynamic Imp 1.1.6Horde Imp 4.1.3Horde Dynamic Imp 1.1.1Horde Dynamic Imp 5.0.4Horde Imp 4.1.6Horde Imp 5.0.3Horde Imp 3.1Horde Imp 5.0.2Horde Dynamic Imp 5.0.13Horde Imp 4.3.6Horde Dynamic Imp 1.0Horde Dynamic Imp 5.0.5Horde Imp 3.2.4Horde Imp 3.1.2Horde Imp 5.0Horde Imp 4.3.3Horde Imp 4.2Horde Dynamic Imp
4.3
CVSSv2
CVE-2008-2783
Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow remote malicious users to inject arbitrary web script or HTML via the timestamp parameter to (1) week.php, (2) workweek.php, and (3) day.php; and (4) the horde p...
Horde GroupwareHorde Groupware Webmail EditionHorde Kronolith
6
CVSSv2
CVE-2008-1284
Directory traversal vulnerability in Horde 3.1.6, Groupware prior to 1.0.5, and Groupware Webmail Edition prior to 1.0.6, when running with certain configurations, allows remote authenticated users to read and execute arbitrary files via ".." sequences and a null byte i...
Horde Groupware Webmail EditionHorde Horde 3.1.6Horde Groupware
4.3
CVSSv2
CVE-2008-1974
Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and Groupware 1.0.5 allows remote malicious users to inject arbitrary web script or HTML via the url parameter.
Horde Groupware 1.0.5Horde Groupware Webmail Edition 1.0.6
10
CVSSv2
CVE-2008-7219
Horde Kronolith H3 2.1 prior to 2.1.7 and 2.2 prior to 2.2-RC2; Nag H3 2.1 prior to 2.1.4 and 2.2 prior to 2.2-RC2; Mnemo H3 2.1 prior to 2.1.2 and H3 2.2 prior to 2.2-RC2; Groupware 1.0 prior to 1.0.3 and 1.1 prior to 1.1-RC2; and Groupware Webmail Edition 1.0 prior to 1.0.4 and...
Horde Kronolith H3 2.1.3Horde Kronolith H3 2.1.6Horde Nag H3 2.1Horde Groupware 1.0Horde Groupware 1.0.2Horde Nag H3 2.1.2Horde Nag H3 2.1.3Horde Nag H3 2.2Horde Mnemo H3 2.1Horde Kronolith H3 2.1.4Horde Kronolith H3 2.1Horde Kronolith H3 2.1.2Horde Kronolith H3 2.1.5Horde Groupware 1.1Horde Mnemo H3 2.1.1Horde Groupware Webmail Edition 1.1Horde Groupware Webmail Edition 1.0Horde Groupware Webmail Edition 1.0.2Horde Kronolith H3 2.1.1Horde Kronolith H3 2.2Horde Nag H3 2.1.1Horde Mnemo H3 2.2
5.8
CVSSv2
CVE-2007-6018
IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote malicious users to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) "purge" delet...
Horde Framework 3.1.5Horde Imp 4.1.5Horde Groupware Webmail Edition 1.0.3Horde Horde 3.1.5
10
CVSSv2
CVE-2008-7218
Unspecified vulnerability in the Horde API in Horde 3.1 prior to 3.1.6 and 3.2 prior to 3.2 prior to 3.2-RC2; Turba H3 2.1 prior to 2.1.6 and 2.2 prior to 2.2-RC2; Kronolith H3 2.1 prior to 2.1.7 and H3 2.2 prior to 2.2-RC2; Nag H3 2.1 prior to 2.1.4 and 2.2 prior to 2.2-RC2; Mne...
Horde Kronolith H3 2.1.1Horde Kronolith H3 2.1Horde Kronolith H3 2.1.2Horde Turba H3 2.1.1Horde Turba H3 2.1Horde Nag H3 2.1.2Horde Nag H3 2.1.3Horde Groupware 1.1Horde Horde 3.1.1Horde Horde 3.1.2Horde Kronolith H3 2.1.5Horde Kronolith H3 2.1.6Horde Turba H3 2.1.4Horde Turba H3 2.2Horde Mnemo H3 2.1.1Horde Mnemo H3 2.2Horde Groupware Webmail Edition 1.1Horde Horde 3.1.5Horde Groupware Webmail Edition 1.0Horde Horde 3.1Horde Kronolith H3 2.1.3Horde Kronolith H3 2.1.4
4.3
CVSSv2
CVE-2010-3693
Cross-site scripting (XSS) vulnerability in Horde Dynamic IMP (DIMP) prior to 1.1.5, and Horde Groupware Webmail Edition prior to 1.2.7, allows remote malicious users to inject arbitrary web script or HTML via vectors related to displaying mailbox names.
Horde Groupware 1.0.7Horde Groupware 1.1.4Horde Groupware 1.1.3Horde Groupware 1.2Horde Groupware 1.0Horde GroupwareHorde Groupware 1.1.6Horde Groupware 1.1Horde Groupware 1.0.1Horde Groupware 1.0.6Horde Groupware 1.2.2Horde Groupware 1.2.5Horde Groupware 1.0.4Horde Groupware 1.2.3Horde Groupware 1.1.5Horde Groupware 1.0.5Horde Groupware 1.1.2Horde Groupware 1.0.2Horde Groupware 1.0.3Horde Groupware 1.2.4Horde Groupware 1.0.8Horde Groupware 1.1.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22460CVE-2024-4646CVE-2024-29212IMAPCVE-2023-36672CVE-2024-34547command injectionCVE-2024-4651stored XSS
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook