Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
horde groupware 1.0.4 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2008-0807
lib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x prior to 2.1.7 and 2.2.x prior to 2.2-RC3, as used in products such as Horde Groupware prior to 1.0.4 and Horde Groupware Webmail Edition prior to 1.0.5, does not properly check access rights, which allows remote aut...
Horde Groupware 1.0.3
Horde Groupware Webmail Edition 1.0.4
Horde Turba Contact Manager 2.1.6
NA
CVE-2010-3693
Cross-site scripting (XSS) vulnerability in Horde Dynamic IMP (DIMP) prior to 1.1.5, and Horde Groupware Webmail Edition prior to 1.2.7, allows remote malicious users to inject arbitrary web script or HTML via vectors related to displaying mailbox names.
Horde Groupware 1.1
Horde Groupware 1.0
Horde Groupware 1.2.2
Horde Groupware 1.1.5
Horde Groupware 1.2.1
Horde Groupware 1.0.2
Horde Groupware 1.0.1
Horde Groupware 1.0.5
Horde Groupware 1.1.1
Horde Groupware 1.0.3
Horde Groupware 1.1.3
Horde Groupware 1.0.4
Horde Groupware 1.2
Horde Groupware 1.1.4
Horde Groupware 1.1.2
Horde Groupware 1.2.3
Horde Groupware 1.0.6
Horde Groupware 1.0.7
Horde Groupware 1.0.8
Horde Groupware 1.1.6
Horde Groupware 1.2.4
Horde Groupware 1.2.5
NA
CVE-2008-3650
Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related to "unescaped output," possibly cross-site scripting (XSS), in the (1) object browser and (2) contact view.
Horde Groupware Webmail Edition 1.0.1
Horde Groupware Webmail Edition 1.1
Horde Groupware Webmail Edition 1.0.5
Horde Groupware Webmail Edition 1.0.7
Horde Groupware Webmail Edition 1.0.3
Horde Groupware Webmail Edition 1.0
Horde Groupware Webmail Edition 1.0.2
Horde Groupware Webmail Edition 1.0.6
Horde Groupware Webmail Edition 1.0.4
NA
CVE-2012-0909
Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition prior to 4.0.6 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, related to email verification. NOTE: Some of these details are obtained from thir...
Horde Groupware Webmail Edition 1.1.5
Horde Groupware Webmail Edition 1.0
Horde Groupware Webmail Edition 1.0.1
Horde Groupware Webmail Edition 1.1
Horde Groupware Webmail Edition 4.0.1
Horde Groupware Webmail Edition 1.2.2
Horde Groupware Webmail Edition 1.2.8
Horde Groupware Webmail Edition
Horde Groupware Webmail Edition 1.0.5
Horde Groupware Webmail Edition 1.2.4
Horde Groupware Webmail Edition 1.0.7
Horde Groupware Webmail Edition 1.1.6
Horde Groupware Webmail Edition 1.0.3
Horde Groupware Webmail Edition 4.0.3
Horde Groupware Webmail Edition 1.0.8
Horde Groupware Webmail Edition 1.2.5
Horde Groupware Webmail Edition 1.2.7
Horde Groupware Webmail Edition 1.2.1
Horde Groupware Webmail Edition 4.0.2
Horde Groupware Webmail Edition 1.0.2
Horde Groupware Webmail Edition 1.1.1
Horde Groupware Webmail Edition 1.0.6
NA
CVE-2010-3695
Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP prior to 4.3.8, and Horde Groupware Webmail Edition prior to 1.2.7, allows remote malicious users to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_save action, related t...
Horde Imp 2.2.7
Horde Imp 2.2.5
Horde Imp 4.0
Horde Imp 4.1.3
Horde Imp 4.1.6
Horde Imp 3.1
Horde Imp 4.3.6
Horde Imp 3.2.4
Horde Imp 3.1.2
Horde Imp 4.3.3
Horde Imp 4.2
Horde Imp 2.2.1
Horde Imp 3.2.2
Horde Imp 4.3.1
Horde Imp 2.2.2
Horde Imp 4.0.2
Horde Imp 2.2.4
Horde Imp
Horde Imp 2.0
Horde Imp 4.2.1
Horde Imp 4.3.2
Horde Imp 2.2.6
1 EDB exploit
NA
CVE-2010-4778
Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP prior to 4.3.8, and Horde Groupware Webmail Edition prior to 1.2.7, allow remote malicious users to inject arbitrary web script or HTML via the (1) username (aka fmusername), (2) password (aka ...
Horde Imp 2.2.7
Horde Imp 2.2.5
Horde Imp 4.0
Horde Imp 4.1.3
Horde Imp 4.1.6
Horde Imp 3.1
Horde Imp 4.3.6
Horde Imp 3.2.4
Horde Imp 3.1.2
Horde Imp 4.3.3
Horde Imp 4.2
Horde Imp 2.2.1
Horde Imp 3.2.2
Horde Imp 4.3.1
Horde Imp 2.2.2
Horde Imp 4.0.2
Horde Imp 2.2.4
Horde Imp
Horde Imp 2.0
Horde Imp 4.2.1
Horde Imp 4.3.2
Horde Imp 2.2.6
NA
CVE-2009-3701
Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework prior to 3.3.6, Horde Groupware prior to 1.2.5, and Horde Groupware Webmail Edition prior to 1.2.5 allow remote malicious users to inject arbitrary web script or HTM...
Horde Application Framework 3.0.2
Horde Groupware 1.1
Horde Application Framework 3.2.4
Horde Application Framework 2.1
Horde Groupware 1.0
Horde Groupware 1.2.2
Horde Application Framework 2.2.4 Rc1
Horde Groupware 1.1.5
Horde Application Framework 3.2.1
Horde Application Framework
Horde Application Framework 2.0
Horde Application Framework 3.3.2
Horde Application Framework 3.0.8
Horde Groupware 1.2.1
Horde Application Framework 3.0
Horde Groupware 1.0.2
Horde Application Framework 3.2.2
Horde Groupware
Horde Groupware 1.0.1
Horde Groupware 1.0.5
Horde Application Framework 2.2
Horde Groupware 1.1.1
4 EDB exploits
NA
CVE-2009-4363
Text_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework prior to 3.3.6, Horde Groupware prior to 1.2.5, and Horde Groupware Webmail Edition prior to 1.2.5 does not properly handle data: URIs, which allows remote malicious users to conduct cross-site scripting (XS...
Horde Application Framework 3.0.2
Horde Groupware 1.1
Horde Application Framework 3.2.4
Horde Application Framework 2.1
Horde Groupware 1.0
Horde Groupware 1.2.2
Horde Application Framework 2.2.4 Rc1
Horde Groupware 1.1.5
Horde Application Framework 3.2.1
Horde Application Framework
Horde Application Framework 2.0
Horde Application Framework 3.3.2
Horde Application Framework 3.0.8
Horde Groupware 1.2.1
Horde Application Framework 3.0
Horde Groupware 1.0.2
Horde Application Framework 3.2.2
Horde Groupware
Horde Groupware 1.0.1
Horde Groupware 1.0.5
Horde Application Framework 2.2
Horde Groupware 1.1.1
NA
CVE-2008-7219
Horde Kronolith H3 2.1 prior to 2.1.7 and 2.2 prior to 2.2-RC2; Nag H3 2.1 prior to 2.1.4 and 2.2 prior to 2.2-RC2; Mnemo H3 2.1 prior to 2.1.2 and H3 2.2 prior to 2.2-RC2; Groupware 1.0 prior to 1.0.3 and 1.1 prior to 1.1-RC2; and Groupware Webmail Edition 1.0 prior to 1.0.4 and...
Horde Nag H3 2.1.3
Horde Groupware 1.1
Horde Groupware Webmail Edition 1.1
Horde Nag H3 2.1.2
Horde Groupware 1.0
Horde Nag H3 2.1.1
Horde Nag H3 2.2
Horde Kronolith H3 2.1.5
Horde Groupware 1.0.2
Horde Groupware Webmail Edition 1.0.3
Horde Mnemo H3 2.1.1
Horde Mnemo H3 2.1
Horde Kronolith H3 2.1.2
Horde Kronolith H3 2.1.4
Horde Groupware 1.0.1
Horde Groupware Webmail Edition 1.0
Horde Nag H3 2.1
Horde Groupware Webmail Edition 1.0.2
Horde Kronolith H3 2.1.3
Horde Mnemo H3 2.2
Horde Kronolith H3 2.1.1
Horde Kronolith H3 2.1
NA
CVE-2012-0791
Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP prior to 5.0.18 and Horde Groupware Webmail Edition prior to 4.0.6 allow remote malicious users to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compo...
Horde Imp 2.2.7
Horde Dynamic Imp 1.1
Horde Imp 2.2.5
Horde Imp 4.0
Horde Dynamic Imp 1.1.6
Horde Imp 4.1.3
Horde Dynamic Imp 1.1.1
Horde Dynamic Imp 5.0.4
Horde Imp 4.1.6
Horde Imp 5.0.3
Horde Imp 3.1
Horde Imp 5.0.2
Horde Dynamic Imp 5.0.13
Horde Imp 4.3.6
Horde Dynamic Imp 1.0
Horde Dynamic Imp 5.0.5
Horde Imp 3.2.4
Horde Imp 3.1.2
Horde Imp 5.0
Horde Imp 4.3.3
Horde Imp 4.2
Horde Dynamic Imp
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27802
template injection
CVE-2024-0044
code injection
CVE-2024-35474
CVE-2024-27857
CVE-2024-23251
CVE-2024-23692
physical
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »