Login Request a demo
HO
Vendor
Horde
36 products with CVEs on record
161
CVEs
0
On KEV
0
New 30D
Products
GR
Groupware
Horde
9.8
46 CVEs0 on KEV0 new
IM
imp
horde
6.5
23 CVEs0 on KEV0 new
HO
Horde
Horde
–
18 CVEs0 on KEV0 new
GW
Groupware Webmail Edition
Horde
–
10 CVEs0 on KEV0 new
HA
Horde Application Framework
Horde
–
9 CVEs0 on KEV0 new
AF
Application Framework
Horde
–
8 CVEs0 on KEV0 new
KR
Kronolith
Horde
–
3 CVEs0 on KEV0 new
KH
Kronolith H3
Horde
–
3 CVEs0 on KEV0 new
KH
Kronolith H4
Horde
–
3 CVEs0 on KEV0 new
TH
Turba H3
Horde
–
3 CVEs0 on KEV0 new
DI
Dynamic Imp
Horde
–
2 CVEs0 on KEV0 new
GO
Gollem
Horde
6.1
2 CVEs0 on KEV0 new
HG
Horde Groupware
Horde
6.1
2 CVEs0 on KEV0 new
HI
Horde Image Api
Horde
8.8
2 CVEs0 on KEV0 new
HI
Horde Imp
Horde
5.9
2 CVEs0 on KEV0 new
IM
Internet Mail Program
Horde
–
2 CVEs0 on KEV0 new
MH
Mnemo H3
Horde
–
2 CVEs0 on KEV0 new
NH
Nag H3
Horde
–
2 CVEs0 on KEV0 new
PA
Passwd
Horde
–
2 CVEs0 on KEV0 new
AC
Accounts
Horde
–
1 CVEs0 on KEV0 new
CH
Chora
Horde
–
1 CVEs0 on KEV0 new
FO
Forwards
Horde
–
1 CVEs0 on KEV0 new
FR
Framework
Horde
–
1 CVEs0 on KEV0 new
HF
Horde Form
Horde
6.5
1 CVEs0 on KEV0 new
HI
Horde Image
Horde
5.7
1 CVEs0 on KEV0 new
HL
Horde Ldap
Horde
8.1
1 CVEs0 on KEV0 new
HM
Horde Mime Viewer
Horde
5.4
1 CVEs0 on KEV0 new
IH
Ingo H3
Horde
–
1 CVEs0 on KEV0 new
MN
Mnemo
Horde
–
1 CVEs0 on KEV0 new
NA
Nag
Horde
–
1 CVEs0 on KEV0 new
NT
Nag Task List Manager H3
Horde
–
1 CVEs0 on KEV0 new
TU
Turba
Horde
–
1 CVEs0 on KEV0 new
TC
Turba Contact Manager
Horde
–
1 CVEs0 on KEV0 new
TC
Turba Contact Manager H3
Horde
–
1 CVEs0 on KEV0 new
VA
Vaction
Horde
–
1 CVEs0 on KEV0 new
VF
Vfs
horde
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-65053
IM
imp
horde
6.1
0%
Aug 24Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Name
CVE-2026-60102
VF
Vfs
horde
8.8
3%
Jul 8Horde VFS < 3.0.1 OS Command Injection via Horde_Vfs_Smb Driver
CVE-2026-58451
IM
imp
horde
6.5
1%
Jul 1Horde IMP < 7.0.1 Path Traversal via Compose.php img src
CVE-2025-41066
GR
Groupware
Horde
5.3
0%
Dec 2Disclosure of sensitive information in Horde Groupware
CVE-2022-30287
GR
Groupware
Horde
8.0
69%
Jul 28Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class
CVE-2022-26874
HM
Horde Mime Viewer
Horde
5.4
1%
Mar 11lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition
CVE-2021-26929
GR
Groupware
Horde
6.1
5%
Feb 14An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used)
CVE-2020-8034
GO
Gollem
Horde
6.1
1%
May 18Gollem before 3.0.13, as used in Horde Groupware Webmail Edition 5.2.22 and other products, is affected by a reflected Cross-Site Scripting (XSS) vulnerability via the HTTP GET…
CVE-2020-8035
GR
Groupware
Horde
6.1
1%
May 18The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (XSS) vulnerability via an SVG image upload containing a…
CVE-2020-8866
GR
Groupware
Horde
6.5
10%
Mar 23This vulnerability allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webmail Edition 5.2.22
CVE-2020-8865
GR
Groupware
Horde
6.3
7%
Mar 23This vulnerability allows remote attackers to execute local PHP files on affected installations of Horde Groupware Webmail Edition 5.2.22
CVE-2020-8518
GR
Groupware
Horde
9.8
72%
Feb 17Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution
CVE-2013-6275
GR
Groupware
Horde
6.5
2%
Nov 5Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php
CVE-2013-6365
GR
Groupware
Horde
5.3
1%
Nov 5Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions
CVE-2013-6364
GR
Groupware
Horde
8.8
2%
Nov 5Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book
CVE-2019-12095
GR
Groupware
Horde
8.8
1%
Oct 24Horde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows CSRF, as demonstrated by the treanBookmarkTags parameter to the trean/ URI on a…
CVE-2019-12094
GR
Groupware
Horde
6.1
2%
Oct 24Horde Groupware Webmail Edition through 5.2.22 allows XSS via an admin/user.php?form=update_f&user_name= or admin/user.php?form=remove_f&user_name= or admin/config/diff.php?app=…
CVE-2019-9858
GR
Groupware
Horde
8.8
19%
May 29Remote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17
CVE-2017-17689
HI
Horde Imp
Horde
5.9
4%
May 16The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL
CVE-2017-17688
HI
Horde Imp
Horde
5.9
5%
May 16The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL
CVE-2014-3999
HL
Horde Ldap
Horde
8.1
2%
Apr 10The Horde_Ldap library before 2.0.6 for Horde allows remote attackers to bypass authentication by leveraging knowledge of the LDAP bind user DN
CVE-2017-16908
GR
Groupware
Horde
5.4
2%
Nov 20In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource
CVE-2017-16907
GR
Groupware
Horde
5.4
1%
Nov 20In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action
CVE-2017-16906
GR
Groupware
Horde
5.4
1%
Nov 20In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -> New Event" action
CVE-2017-15235
GR
Groupware
Horde
7.5
6%
Oct 11The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn parameter that…
CVE-2017-14650
HI
Horde Image Api
Horde
8.1
4%
Sep 21A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility
CVE-2017-9774
HI
Horde Image Api
Horde
8.8
2%
Jun 21Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request
CVE-2017-9773
HI
Horde Image
Horde
5.7
1%
Jun 21Denial of Service was found in Horde_Image 2.x before 2.5.0 via a crafted URL to the "Null" image driver
CVE-2017-7414
GR
Groupware
Horde
7.5
1%
Apr 4In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition 5.x through 5.2.17, OS Command Injection can occur if the user has PGP features enabled in the user's…
CVE-2017-7413
GR
Groupware
Horde
8.8
39%
Apr 4In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur if the attacker is an authenticated Horde Webmail user, has…
CVE-2016-5303
GR
Groupware
Horde
6.1
2%
Dec 20Cross-site scripting (XSS) vulnerability in the Horde Text Filter API in Horde Groupware and Horde Groupware Webmail Edition before 5.2.16 allows remote attackers to inject…
CVE-2016-2228
GR
Groupware
Horde
6.1
2%
Apr 13Cross-site scripting (XSS) vulnerability in horde/templates/topbar/_menubar.html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows…
CVE-2015-8807
GR
Groupware
Horde
6.1
2%
Apr 13Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and…
CVE-2015-7984
GR
Groupware
Horde
–
4%
Nov 19Multiple cross-site request forgery (CSRF) vulnerabilities in Horde before 5.2.8, Horde Groupware before 5.2.11, and Horde Groupware Webmail Edition before 5.2.11 allow remote…
CVE-2014-4946
IM
Internet Mail Program
Horde
–
1%
Jul 14Multiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) before 6.1.8, as used in Horde Groupware Webmail Edition before 5.1.5, allow remote…
CVE-2014-4945
GR
Groupware
Horde
–
1%
Jul 14Multiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) before 6.1.8, as used in Horde Groupware Webmail Edition before 5.1.5, allow remote…
CVE-2012-6640
GR
Groupware
Horde
–
2%
Apr 5Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to…
CVE-2012-5567
GR
Groupware
Horde
–
2%
Apr 5Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4 before 3.0.18, as used in Horde Groupware Webmail Edition before 4.0.9, allow remote…
CVE-2012-5566
KH
Kronolith H4
Horde
–
2%
Apr 5Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4 before 3.0.17, as used in Horde Groupware Webmail Edition before 4.0.8, allow remote…
CVE-2012-5565
IM
Imp
Horde
–
2%
Apr 5Cross-site scripting (XSS) vulnerability in js/compose-dimp.js in Horde Internet Mail Program (IMP) before 5.0.24, as used in Horde Groupware Webmail Edition before 4.0.9, allows…
CVE-2014-1691
HA
Horde Application Framework
Horde
–
43%
Apr 1The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP…
CVE-2012-6620
KH
Kronolith H4
Horde
–
2%
Jan 16Multiple cross-site scripting (XSS) vulnerabilities in the (1) tasks and (2) search views in Horde Kronolith H4 before 3.0.17 allow remote attackers to inject arbitrary web script…
CVE-2012-0209
GR
Groupware
Horde
–
72%
Sep 25Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2012, contains an externally introduced…
CVE-2012-0909
GW
Groupware Webmail Edition
Horde
–
2%
Jan 24Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2012-0791
DI
Dynamic Imp
Horde
–
2%
Jan 24Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web…
CVE-2010-3447
GO
Gollem
Horde
–
2%
Apr 1Cross-site scripting (XSS) vulnerability in view.php in the file viewer in Horde Gollem before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the file…
CVE-2010-4778
GR
Groupware
Horde
–
1%
Apr 1Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allow remote attackers to…
CVE-2010-3693
GR
Groupware
Horde
–
3%
Apr 1Cross-site scripting (XSS) vulnerability in Horde Dynamic IMP (DIMP) before 1.1.5, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary…
CVE-2010-3695
IM
Imp
Horde
–
5%
Mar 31Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject…
CVE-2010-3077
HA
Horde Application Framework
Horde
–
4%
Nov 9Cross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML…
CVE-2010-3694
HA
Horde Application Framework
Horde
–
1%
Nov 9Cross-site request forgery (CSRF) vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for…
CVE-2010-1638
HO
Horde
Horde
–
1%
Jun 22The IMP plugin in Horde allows remote attackers to bypass firewall restrictions and use Horde as a proxy to scan internal networks via a crafted request to an unspecified test…
CVE-2010-0463
IM
Imp
Horde
–
2%
Jan 29Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to…
CVE-2009-4363
GR
Groupware
Horde
–
1%
Dec 21Text_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 does not…
CVE-2009-3701
AF
Application Framework
Horde
–
5%
Dec 21Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware…
CVE-2009-3237
HA
Horde Application Framework
Horde
–
2%
Sep 17Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and…
CVE-2009-3236
GR
Groupware
Horde
–
2%
Sep 17The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before…
CVE-2008-7219
MH
Mnemo H3
Horde
–
3%
Sep 13Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0…
CVE-2008-7218
GR
Groupware
Horde
–
2%
Sep 13Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 before 2.2-RC2; Kronolith H3 2.1 before…
CVE-2009-2360
PA
Passwd
Horde
–
5%
Jul 8Cross-site scripting (XSS) vulnerability in passwd/main.php in the Passwd module before 3.1.1 for Horde allows remote attackers to inject arbitrary web script or HTML via the…