Login Request a demo
IM
Product
imp
by horde · last CVE Aug 24, 2026
24
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Vulnerabilities24In the news0Timeline
Severity mix
Critical 0High 1Medium 3Low 0
Severity
All severities24Critical0High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add imp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-58451
6.5
1%
Jul 1
Horde IMP < 7.0.1 Path Traversal via Compose.php img src
Affected: before 7.0.1
CVE-2026-65053
6.1
0%
Aug 24
Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Name
Affected: before 7.2.0
CVE-2002-2024
5.3
2%
Dec 31
Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spelling.php3, and (4)…
Affected: 2.2.7
Showing 3