roundcube vulnerabilities (Debian)
126 vulnerabilities.
roundcubeDebianCross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube before 1.0.6...6.1 MediumroundcubeDebianDirectory traversal vulnerability in the set_skin function in program/include/rcmail_output_html...7.5 HighroundcubeDebianCross-site scripting (XSS) vulnerability in program/js/app.js in Roundcube webmail before 1.0.7...3.5 LowroundcubeDebianprogram/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2...6.5 MediumroundcubeDebianMultiple buffer overflows in the DBMail driver in the Password plugin in Roundcube before 1.1.0...8.8 HighroundcubeDebianThe DBMail driver in the Password plugin in Roundcube before 1.1.0 allows remote attackers to...8.8 HighroundcubeDebianprogram/lib/Roundcube/rcube_washtml.php in Roundcube before 1.0.5 does not properly quote strings...4.3 MediumroundcubeDebianMultiple cross-site request forgery (CSRF) vulnerabilities in Roundcube Webmail before 1.0.4...6.8 MediumroundcubeDebianAbsolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7...5.0 MediumroundcubeDebiansteps/utils/save_pref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9.5 allows remote...7.5 HighroundcubeDebianMultiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user...4.3 MediumroundcubeDebianCross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote...4.3 MediumroundcubeDebianCross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0...4.3 MediumroundcubeDebianCross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer...2.6 LowroundcubeDebianinclude/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used,...5.0 MediumroundcubeDebianCross-site scripting (XSS) vulnerability in the UI messages functionality in Roundcube Webmail...4.3 MediumroundcubeDebiansteps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request...5.5 MediumroundcubeDebianThe login form in Roundcube Webmail before 0.5.1 does not properly handle a correctly...3.5 LowroundcubeDebianRoundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain...5.0 MediumroundcubeDebianCross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows...6.8 MediumroundcubeDebianCross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows...6.8 MediumroundcubeDebianCross-site scripting (XSS) vulnerability in RoundCube Webmail (roundcubemail) 0.2 stable allows...4.3 MediumroundcubeDebianRoundCube Webmail (roundcubemail) before 0.2-beta allows remote attackers to cause a denial of...7.8 HighroundcubeDebianPHPMailer susceptible to arbitrary code execution10.0 HighroundcubeDebianCross-site scripting (XSS) vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier...4.3 Medium