HO
Product
Horde
18
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Horde to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-0209 | – | Sep 25 | Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2012, contains an externally introduced… Affected: 3.3.12 |
| CVE-2010-1638 | – | Jun 22 | The IMP plugin in Horde allows remote attackers to bypass firewall restrictions and use Horde as a proxy to scan internal networks via a crafted request to an unspecified test… Affected: All versions, or not specified |
| CVE-2008-7218 | – | Sep 13 | Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 before 2.2-RC2; Kronolith H3 2.1 before… Affected: 3.1; 3.1.1; 3.1.2; 3.1.3; 3.1.4; 3.1.5; +1 more |
| CVE-2008-3824 | – | Sep 12 | Cross-site scripting (XSS) vulnerability in (1) Text_Filter/Filter/xss.php in Horde 3.1.x before 3.1.9 and 3.2.x before 3.2.2 and (2) externalinput.php in Popoon r22196 and… Affected: 3.1.1; 3.1.2; 3.1.3; 3.1.4; 3.1.5; 3.1.6; +4 more |
| CVE-2008-3823 | – | Sep 12 | Cross-site scripting (XSS) vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML… Affected: 3.2; 3.2.1 |
| CVE-2008-1284 | – | Mar 11 | Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with certain configurations, allows remote… Affected: 3.1.6 |
| CVE-2007-6018 | – | Jan 11 | IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers… Affected: 3.1.5 |
| CVE-2006-4255 | – | Aug 21 | Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple… Affected: 3.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.4_rc1; +7 more |
| CVE-2006-3548 | – | Jul 13 | Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web… Affected: 3.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.4_rc1; +7 more |
| CVE-2006-2195 | – | Jun 15 | Cross-site scripting (XSS) vulnerability in horde 3 (horde3) before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) templates/problem/problem.inc and… Affected: through 3.0.9; 3.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; +5 more |
| CVE-2006-1260 | – | Mar 19 | Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check Affected: 1.2; 1.2.1; 1.2.2; 1.2.3; 1.2.4; 1.2.5; +27 more |
| CVE-2005-3759 | – | Nov 22 | Multiple cross-site scripting (XSS) vulnerabilities in Horde before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) gzip/tar and (2) css MIME… Affected: 1.2; 1.2.1; 1.2.2; 1.2.3; 1.2.4; 1.2.5; +25 more |
| CVE-2005-3570 | – | Nov 16 | Unspecified cross-site scripting (XSS) vulnerability in Horde before 2.2.9 allows remote attackers to inject arbitrary web script or HTML via "not properly escaped error messages" Affected: 2.2; 2.2.1; 2.2.3; 2.2.4; 2.2.4_rc1; 2.2.5; +3 more |
| CVE-2005-3344 | – | Nov 16 | The default installation of Horde 3.0.4 contains an administrative account with a blank password, which allows remote attackers to gain access Affected: 3.0.4 |
| CVE-2005-0378 | – | May 2 | Multiple cross-site scripting (XSS) vulnerabilities in Horde 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to prefs.php or (2) url… Affected: 3.0 |
| CVE-2003-0728 | – | Oct 20 | Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL Affected: through 2.2.4 |
| CVE-2002-0181 | – | Apr 22 | Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal cookies of other IMP/HORDE users… Affected: 1.2.7 |
| CVE-2000-0910 | – | Dec 19 | Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address Affected: 1.2 |
Showing 18