Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

horde horde imp - vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2010-0463
Horde IMP 4.3.6 and previous versions does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote malicious users to determine the network location of the webmail user by logging DNS requests.
Horde Imp 2.2.6Horde Imp 2.2.7Horde Imp 4.0.1Horde Imp 4.0Horde Imp 3.2.2Horde Imp 3.2.1Horde Imp 4.2.1Horde Imp 4.2.2Horde ImpHorde Imp 3.2.7Horde Imp 4.0.2Horde Imp 4.1.3Horde Imp 4.0.4Horde Imp 2.2.2Horde Imp 2.2.3Horde Imp 3.2.6Horde Imp 3.2.5Horde Imp 3.0Horde Imp 4.1.5Horde Imp 4.3.2Horde Imp 4.3.3Horde Imp 2.2.4
NA
CVE-2005-4080
Horde IMP 4.0.4 and previous versions does not sanitize strings containing UTF16 null characters, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via UTF16 encoded attachments and strings that will be executed when viewed using Internet Explorer,...
Horde Imp 2.0Horde Imp 2.2Horde Imp 2.2.7Horde Imp 2.2.8Horde Imp 3.2.2Horde Imp 3.2.3Horde Imp 2.2.3Horde Imp 2.2.4Horde Imp 3.1Horde Imp 3.1.2Horde Imp 4.0Horde Imp 4.0.1Horde Imp 2.2.5Horde Imp 2.2.6Horde Imp 3.2Horde Imp 3.2.1Horde Imp 4.0.2Horde Imp 4.0.3Horde Imp 4.0.4Horde Imp 2.2.1Horde Imp 2.2.2Horde Imp 2.3
NA
CVE-2006-4255
Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 prior to 4.1.3 allows remote malicious users to include arbitrary web script or HTML via multiple unspecified vectors related to folder names, as injected into the vfolder_label form field in the IMP...
Horde Horde 3.0.4 Rc1Horde Horde 3.0.4 Rc2Horde Horde 3.0.6Horde Imp 2.2Horde Imp 2.2.1Horde Imp 2.2.8Horde Imp 2.3Horde Imp 3.2.4Horde Imp 3.2.5Horde Horde 3.0.1Horde Horde 3.0.2Horde Horde 3.0.9Horde Horde 3.1Horde Horde 3.0Horde Horde 3.0.7Horde Horde 3.0.8Horde Imp 2.2.2Horde Imp 2.2.3Horde Imp 3.0Horde Imp 3.1Horde Horde 3.0.3Horde Horde 3.0.4
NA
CVE-2004-1443
Cross-site scripting (XSS) vulnerability in the inline MIME viewer in Horde-IMP (Internet Messaging Program) 3.2.4 and previous versions, when used with Internet Explorer, allows remote malicious users to inject arbitrary web script or HTML via an e-mail message.
Horde Imp 2.0Horde Imp 2.2Horde Imp 2.2.7Horde Imp 2.2.8Horde Imp 3.2.2Horde Imp 3.2.3Horde Imp 2.2.3Horde Imp 2.2.4Horde Imp 3.1Horde Imp 3.1.2Horde Imp 2.2.5Horde Imp 2.2.6Horde Imp 3.2Horde Imp 3.2.1Horde Imp 2.2.1Horde Imp 2.2.2Horde Imp 2.3Horde Imp 3.0Horde Imp 3.2.4
NA
CVE-2007-1474
Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain privileges via multiple space-delimited pathnames.
Horde Horde Application Framework 3.0.4Horde Horde Application Framework 3.1.3Horde Imp 2.2.5Horde Imp 2.2.6Horde Imp 3.2.1Horde Imp 3.2.2Horde Imp 2.0Horde Imp 2.2Horde Imp 2.2.7Horde Imp 2.2.8Horde Imp 3.2.3Horde Imp 3.2.4Horde Horde Application Framework 3.0.0Horde Imp 2.2.3Horde Imp 2.2.4Horde Imp 3.1.2Horde Imp 3.2Horde Imp 2.2.1Horde Imp 2.2.2Horde Imp 2.3Horde Imp 3.0Horde Imp 3.1
NA
CVE-2004-0584
Unknown vulnerability in Horde IMP 3.2.3 and previous versions, before a "security fix," does not properly validate input, which allows remote malicious users to execute arbitrary script as other users via script or HTML in an e-mail message, possibly triggering a cross...
Horde Imp 2.0Horde Imp 2.2Horde Imp 2.2.7Horde Imp 2.2.8Horde Imp 3.2.2Horde Imp 3.2.3Horde Imp 2.2.1Horde Imp 2.2.2Horde Imp 2.3Horde Imp 3.0Horde Imp 2.2.3Horde Imp 2.2.4Horde Imp 3.1Horde Imp 3.1.2Horde Imp 2.2.5Horde Imp 2.2.6Horde Imp 3.2Horde Imp 3.2.1
NA
CVE-2012-6640
Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) prior to 5.0.22, as used in Horde Groupware Webmail Edition prior to 4.0.9, allows remote malicious users to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerabi...
Horde Groupware 4.0.7Horde Groupware 4.0.2Horde Groupware 4.0Horde Groupware 4.0.6Horde Groupware 4.0.5Horde Groupware 4.0.4Horde Groupware 4.0.3Horde GroupwareHorde Groupware 4.0.1Horde Imp 5.0.3Horde Imp 5.0.2Horde Imp 5.0.1Horde Imp 5.0.7Horde Imp 5.0.5Horde Imp 5.0.6Horde Imp 5.0.4Horde Imp 5.0Horde Imp 5.0.13Horde Imp 5.0.9Horde Imp 5.0.8Horde Imp 5.0.12Horde Imp 5.0.16
NA
CVE-2010-3695
Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP prior to 4.3.8, and Horde Groupware Webmail Edition prior to 1.2.7, allows remote malicious users to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_save action, related t...
Horde Imp 4.1.3Horde Imp 4.0.4Horde Imp 2.2.1Horde Imp 4.1.5Horde Imp 4.0.3Horde Imp 2.2.5Horde Imp 4.3.5Horde Imp 4.2.2Horde Imp 4.3Horde Imp 4.3.2Horde Imp 3.2.7Horde Imp 3.2Horde Imp 3.1.2Horde Imp 3.2.2Horde Imp 2.2.2Horde Imp 2.0Horde Imp 4.3.3Horde Imp 3.2.4Horde Imp 3.2.3Horde Imp 2.2.8Horde Imp 3.1Horde Imp 4.0.2
NA
CVE-2010-4778
Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP prior to 4.3.8, and Horde Groupware Webmail Edition prior to 1.2.7, allow remote malicious users to inject arbitrary web script or HTML via the (1) username (aka fmusername), (2) password (aka ...
Horde Imp 4.0.3Horde Imp 4.1.6Horde Imp 2.2.5Horde Imp 2.2.6Horde Imp 4.2.2Horde Imp 4.2Horde Imp 3.2.7Horde Imp 4.0Horde Imp 3.2Horde Imp 3.2.2Horde Imp 2.2Horde Imp 2.2.1Horde Imp 2.2.2Horde Imp 3.2.4Horde Imp 3.2.3Horde Imp 3.2.6Horde Imp 3.2.5Horde Imp 4.1.3Horde Imp 4.0.4Horde Imp 2.2.4Horde Imp 4.3.6Horde Imp 2.0
NA
CVE-2012-5565
Cross-site scripting (XSS) vulnerability in js/compose-dimp.js in Horde Internet Mail Program (IMP) prior to 5.0.24, as used in Horde Groupware Webmail Edition prior to 4.0.9, allows remote malicious users to inject arbitrary web script or HTML via a crafted name for an attached ...
Horde Imp 5.0.12Horde Imp 5.0.10Horde Imp 5.0.8Horde Imp 5.0.6Horde Imp 5.0.20Horde Imp 5.0.16Horde Imp 5.0.5Horde Imp 5.0.9Horde ImpHorde Imp 5.0.22Horde Imp 5.0.13Horde Imp 5.0.15Horde Imp 5.0.17Horde Imp 5.0.19Horde Imp 5.0.18Horde Imp 5.0.14Horde Imp 5.0.4Horde Imp 5.0.7Horde Imp 5.0.11Horde Imp 5.0.21Horde Groupware 4.0.6Horde Groupware 4.0.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook