GW
Product
Groupware Webmail Edition
10
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Groupware Webmail Edition to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-0909 | – | Jan 24 | Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via… Affected: through 4.0.5; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2012-0791 | – | Jan 24 | Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web… Affected: through 4.0.5; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2008-7219 | – | Sep 13 | Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0… Affected: 1.0; 1.0.2; 1.0.3; 1.1 |
| CVE-2008-7218 | – | Sep 13 | Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 before 2.2-RC2; Kronolith H3 2.1 before… Affected: 1.0; 1.0.2; 1.0.3; 1.1 |
| CVE-2008-3650 | – | Aug 13 | Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related to "unescaped output," possibly… Affected: 1.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +3 more |
| CVE-2008-2783 | – | Jun 19 | Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow remote attackers to inject arbitrary web script or HTML via… Affected: All versions, or not specified |
| CVE-2008-1974 | – | Apr 27 | Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and Groupware 1.0.5 allows remote attackers to inject arbitrary… Affected: 1.0.6 |
| CVE-2008-1284 | – | Mar 11 | Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with certain configurations, allows remote… Affected: through 1.0.5 |
| CVE-2008-0807 | – | Feb 19 | lib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, as used in products such as Horde Groupware before 1.0.4 and Horde Groupware… Affected: 1.0.4 |
| CVE-2007-6018 | – | Jan 11 | IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers… Affected: 1.0.3 |
Showing 10