Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
horde horde 2.2.1 vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2008-4182
Cross-site scripting (XSS) vulnerability in imp/test.php in Horde Turba Contact Manager H3 2.2.1 and other versions prior to 2.3.1, and possibly other Horde Project products, allows remote malicious users to inject arbitrary web script or HTML via the User field in an IMAP sessio...
Horde Turba Contact Manager H3 3.2.2
Horde Turba Contact Manager H3 2.2.1
Horde Turba Contact Manager H3 3.1.1
312
VMScore
CVE-2005-4190
Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework prior to 3.0.8 allow remote authenticated users to inject arbitrary web script or HTML via multiple vectors, as demonstrated by (1) the identity field, (2) Category and (3) Label search fields, (4)...
Horde Horde Application Framework 1.2.3
Horde Horde Application Framework 1.0.3 4
Horde Horde Application Framework 1.0.2 1
Horde Horde Application Framework 2.0
Horde Horde Application Framework 1.2.4
Horde Horde Application Framework 1.0.3 3
Horde Horde Application Framework 2.2.5
Horde Horde Application Framework 3.0.4
Horde Horde Application Framework 1.0.10
Horde Horde Application Framework 2.2.9
Horde Horde Application Framework 2.2.3
Horde Horde Application Framework 1.2.1
Horde Horde Application Framework 1.0.9
Horde Horde Application Framework 1.3.3
Horde Horde Application Framework 3.0.5
Horde Horde Application Framework 3.0.1
Horde Horde Application Framework 1.2.6
Horde Horde Application Framework 2.2.8
Horde Horde Application Framework 2.2.6
Horde Horde Application Framework 1.2.0
Horde Horde Application Framework 1.0.0
Horde Horde Application Framework 1.2.7
435
VMScore
CVE-2010-3695
Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP prior to 4.3.8, and Horde Groupware Webmail Edition prior to 1.2.7, allows remote malicious users to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_save action, related t...
Horde Imp 2.2.7
Horde Imp 2.2.5
Horde Imp 4.0
Horde Imp 4.1.3
Horde Imp 4.1.6
Horde Imp 3.1
Horde Imp 4.3.6
Horde Imp 3.2.4
Horde Imp 3.1.2
Horde Imp 4.3.3
Horde Imp 4.2
Horde Imp 2.2.1
Horde Imp 3.2.2
Horde Imp 4.3.1
Horde Imp 2.2.2
Horde Imp 4.0.2
Horde Imp 2.2.4
Horde Imp
Horde Imp 2.0
Horde Imp 4.2.1
Horde Imp 4.3.2
Horde Imp 2.2.6
1 EDB exploit
383
VMScore
CVE-2010-4778
Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP prior to 4.3.8, and Horde Groupware Webmail Edition prior to 1.2.7, allow remote malicious users to inject arbitrary web script or HTML via the (1) username (aka fmusername), (2) password (aka ...
Horde Imp 2.2.7
Horde Imp 2.2.5
Horde Imp 4.0
Horde Imp 4.1.3
Horde Imp 4.1.6
Horde Imp 3.1
Horde Imp 4.3.6
Horde Imp 3.2.4
Horde Imp 3.1.2
Horde Imp 4.3.3
Horde Imp 4.2
Horde Imp 2.2.1
Horde Imp 3.2.2
Horde Imp 4.3.1
Horde Imp 2.2.2
Horde Imp 4.0.2
Horde Imp 2.2.4
Horde Imp
Horde Imp 2.0
Horde Imp 4.2.1
Horde Imp 4.3.2
Horde Imp 2.2.6
435
VMScore
CVE-2010-3077
Cross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application Framework prior to 3.3.9 allows remote malicious users to inject arbitrary web script or HTML via the subdir parameter.
Horde Horde Application Framework 3.0.11
Horde Horde Application Framework 2.0
Horde Horde Application Framework 3.2.3
Horde Horde Application Framework 3.0
Horde Horde Application Framework 3.3.4
Horde Horde Application Framework 3.2
Horde Horde Application Framework 3.1.4
Horde Horde Application Framework 2.2.5
Horde Horde Application Framework 3.1
Horde Horde Application Framework 3.0.4
Horde Horde Application Framework 3.0.6
Horde Horde Application Framework 3.1.9
Horde Horde Application Framework 3.1.8
Horde Horde Application Framework 3.1.2
Horde Horde Application Framework 2.2.9
Horde Horde Application Framework 2.2.3
Horde Horde Application Framework 1.3.3
Horde Horde Application Framework 3.0.5
Horde Horde Application Framework 1.3.1
Horde Horde Application Framework 3.0.10
Horde Horde Application Framework 3.0.1
Horde Horde Application Framework 3.3.7
1 EDB exploit
605
VMScore
CVE-2010-3694
Cross-site request forgery (CSRF) vulnerability in the Horde Application Framework prior to 3.3.9 allows remote malicious users to hijack the authentication of unspecified victims for requests to a preference form.
Horde Horde Application Framework 3.0.11
Horde Horde Application Framework 2.0
Horde Horde Application Framework 3.2.3
Horde Horde Application Framework 3.0
Horde Horde Application Framework 3.3.4
Horde Horde Application Framework 3.2
Horde Horde Application Framework 3.1.4
Horde Horde Application Framework 2.2.5
Horde Horde Application Framework 3.1
Horde Horde Application Framework 3.0.4
Horde Horde Application Framework 3.0.6
Horde Horde Application Framework 3.1.9
Horde Horde Application Framework 3.1.8
Horde Horde Application Framework 3.1.2
Horde Horde Application Framework 2.2.9
Horde Horde Application Framework 2.2.3
Horde Horde Application Framework 1.3.3
Horde Horde Application Framework 3.0.5
Horde Horde Application Framework 1.3.1
Horde Horde Application Framework 3.0.10
Horde Horde Application Framework 3.0.1
Horde Horde Application Framework 3.3.7
383
VMScore
CVE-2009-4363
Text_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework prior to 3.3.6, Horde Groupware prior to 1.2.5, and Horde Groupware Webmail Edition prior to 1.2.5 does not properly handle data: URIs, which allows remote malicious users to conduct cross-site scripting (XS...
Horde Application Framework 3.0.2
Horde Groupware 1.1
Horde Application Framework 3.2.4
Horde Application Framework 2.1
Horde Groupware 1.0
Horde Groupware 1.2.2
Horde Application Framework 2.2.4 Rc1
Horde Groupware 1.1.5
Horde Application Framework 3.2.1
Horde Application Framework
Horde Application Framework 2.0
Horde Application Framework 3.3.2
Horde Application Framework 3.0.8
Horde Groupware 1.2.1
Horde Application Framework 3.0
Horde Groupware 1.0.2
Horde Application Framework 3.2.2
Horde Groupware
Horde Groupware 1.0.1
Horde Groupware 1.0.5
Horde Application Framework 2.2
Horde Groupware 1.1.1
450
VMScore
CVE-2009-3701
Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework prior to 3.3.6, Horde Groupware prior to 1.2.5, and Horde Groupware Webmail Edition prior to 1.2.5 allow remote malicious users to inject arbitrary web script or HTM...
Horde Application Framework 3.0.2
Horde Groupware 1.1
Horde Application Framework 3.2.4
Horde Application Framework 2.1
Horde Groupware 1.0
Horde Groupware 1.2.2
Horde Application Framework 2.2.4 Rc1
Horde Groupware 1.1.5
Horde Application Framework 3.2.1
Horde Application Framework
Horde Application Framework 2.0
Horde Application Framework 3.3.2
Horde Application Framework 3.0.8
Horde Groupware 1.2.1
Horde Application Framework 3.0
Horde Groupware 1.0.2
Horde Application Framework 3.2.2
Horde Groupware
Horde Groupware 1.0.1
Horde Groupware 1.0.5
Horde Application Framework 2.2
Horde Groupware 1.1.1
4 EDB exploits
383
VMScore
CVE-2008-6746
Cross-site scripting (XSS) vulnerability in the contact display view in Turba Contact Manager H3 prior to 2.2.1 allows remote malicious users to inject arbitrary web script or HTML via the contact name.
Horde Turba H3 0.0.2
Horde Turba H3 2.0
Horde Turba H3 2.0.2
Horde Turba H3 2.2
Horde Turba H3 1.2.5
Horde Turba H3 2.0.1
Horde Turba H3 1.2.2
Horde Turba H3 2.1.1
Horde Turba H3 2.1.4
Horde Turba H3 0.0.1
Horde Turba H3 2.1
Horde Turba H3 2.1.5
Horde Turba H3 1.1
Horde Turba H3 1.2
Horde Turba H3 2.0.5
Horde Turba H3 2.1.6
Horde Turba H3 1.0
Horde Turba H3 2.1.7
Horde Turba H3 2.1.2
Horde Turba H3 1.2.4
Horde Turba H3 1.2.3
Horde Turba H3
383
VMScore
CVE-2012-0791
Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP prior to 5.0.18 and Horde Groupware Webmail Edition prior to 4.0.6 allow remote malicious users to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compo...
Horde Imp 2.2.7
Horde Dynamic Imp 1.1
Horde Imp 2.2.5
Horde Imp 4.0
Horde Dynamic Imp 1.1.6
Horde Imp 4.1.3
Horde Dynamic Imp 1.1.1
Horde Dynamic Imp 5.0.4
Horde Imp 4.1.6
Horde Imp 5.0.3
Horde Imp 3.1
Horde Imp 5.0.2
Horde Dynamic Imp 5.0.13
Horde Imp 4.3.6
Horde Dynamic Imp 1.0
Horde Dynamic Imp 5.0.5
Horde Imp 3.2.4
Horde Imp 3.1.2
Horde Imp 5.0
Horde Imp 4.3.3
Horde Imp 4.2
Horde Dynamic Imp
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflow
type confusion
server-side request forgery
CVE-2024-38440
CVE-2024-27801
CVE-2024-5868
CVE-2024-0582
CVE-2024-37643
CVE-2024-3105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3