Horde vulnerabilities

Products

• Groupware 46
• Imp 24
• Horde 18
• Groupware Webmail Edition 10
• Application Framework 9
• Application Framework 8
• Kronolith 3
• Kronolith H3 3
• Kronolith H4 3
• Turba H3 3
• Dynamic Imp 2
• Gollem 2
• Groupware Webmail Edition 2
• Groupware 2
• Image Api 2
• Imp 2
• Internet Mail Program 2
• Mnemo H3 2
• Nag H3 2
• Passwd 2

Newest

• horde imp Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Name CVE-2026-65053 5.1 MediumAugust 24, 2026
• horde vfs Horde VFS < 3.0.1 OS Command Injection via Horde_Vfs_Smb Driver CVE-2026-60102 7.7 HighJuly 8, 2026
• horde imp Horde IMP < 7.0.1 Path Traversal via Compose.php img src CVE-2026-58451 7.1 HighJuly 1, 2026
• horde groupware Disclosure of sensitive information in Horde Groupware CVE-2025-41066 6.9 MediumDecember 2, 2025
• horde imp Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS... CVE-2025-30349 Public exploitFix available EPSS 31.3% 7.2 HighMarch 21, 2025
• horde groupware, debian linux +1 more Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which... CVE-2022-30287 Fix available EPSS 69.4% 8.0 HighJuly 28, 2022
• debian linux, horde mime viewer +1 more lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice... CVE-2022-26874 Fix available 5.4 MediumMarch 11, 2022
• horde groupware, debian linux +1 more An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the... CVE-2021-26929 Public exploitFix available 6.1 MediumFebruary 14, 2021
• horde gollem, groupware +1 more Gollem before 3.0.13, as used in Horde Groupware Webmail Edition 5.2.22 and other products, is... CVE-2020-8034 Fix available 6.1 MediumMay 18, 2020
• horde groupware The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a... CVE-2020-8035 Fix available 6.1 MediumMay 18, 2020
• horde groupware, groupware webmail edition, debian linux +1 more +3 more This vulnerability allows remote attackers to create arbitrary files on affected installations of... CVE-2020-8866 Public exploitFix available 4.3 MediumMarch 23, 2020
• horde groupware, groupware webmail edition, debian linux +2 more This vulnerability allows remote attackers to execute local PHP files on affected installations... CVE-2020-8865 Public exploitFix available 6.3 MediumMarch 23, 2020
• horde groupware, debian linux, fedoraproject fedora +2 more Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data,... CVE-2020-8518 Public exploitFix available EPSS 71.7% 9.8 CriticalFebruary 17, 2020
• horde groupware, debian linux +1 more Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php. CVE-2013-6275 Public exploitFix available 6.5 MediumNovember 5, 2019
• horde groupware, debian linux, opensuse +2 more Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions CVE-2013-6365 Fix available 5.3 MediumNovember 5, 2019
• horde groupware, debian linux +1 more Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book CVE-2013-6364 Public exploitFix available 8.8 HighNovember 5, 2019
• horde groupware Horde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows... CVE-2019-12095 Fix available 8.8 HighOctober 24, 2019
• horde groupware Horde Groupware Webmail Edition through 5.2.22 allows XSS via an admin/user.php?form=update_f... CVE-2019-12094 6.1 MediumOctober 24, 2019
• horde groupware, debian linux +1 more Remote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17. Horde/Form... CVE-2019-9858 Public exploitFix available EPSS 18.8% 8.8 HighMay 29, 2019
• 9folders nine, apple mail, bloop airmail +14 more +16 more The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can... CVE-2017-17689 Fix available 5.9 MediumMay 16, 2018
• apple mail, bloop airmail, emclient +8 more +10 more ** DISPUTED ** The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget... CVE-2017-17688 Fix availableDisputed 5.9 MediumMay 16, 2018
• horde ldap The Horde_Ldap library before 2.0.6 for Horde allows remote attackers to bypass authentication by... CVE-2014-3999 Fix available 8.1 HighApril 10, 2018
• horde groupware In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource.... CVE-2017-16908 Fix available 5.4 MediumNovember 20, 2017
• horde groupware In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action. CVE-2017-16907 Fix available 5.4 MediumNovember 20, 2017
• horde groupware In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -> New Event"... CVE-2017-16906 Fix available 5.4 MediumNovember 20, 2017
• horde groupware The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to... CVE-2017-15235 Public exploitFix available 7.5 HighOctober 11, 2017
• horde image api A Remote Code Execution vulnerability has been found in the Horde_Image library when using the ... CVE-2017-14650 Fix available 8.1 HighSeptember 21, 2017
• horde image api Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request.... CVE-2017-9774 Fix available 8.8 HighJune 21, 2017
• horde image Denial of Service was found in Horde_Image 2.x before 2.5.0 via a crafted URL to the "Null" image... CVE-2017-9773 Fix available 5.7 MediumJune 21, 2017
• horde groupware In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition 5.x through 5.2.17, OS... CVE-2017-7414 Fix available 7.5 HighApril 4, 2017
• horde groupware In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS... CVE-2017-7413 Fix available EPSS 39.2% 8.8 HighApril 4, 2017
• horde groupware Cross-site scripting (XSS) vulnerability in the Horde Text Filter API in Horde Groupware and... CVE-2016-5303 Fix available 6.1 MediumDecember 20, 2016
• horde groupware, debian linux, fedoraproject fedora +2 more Cross-site scripting (XSS) vulnerability in horde/templates/topbar/_menubar.html.php in Horde... CVE-2016-2228 Fix available 6.1 MediumFebruary 28, 2016
• horde groupware, debian linux, fedoraproject fedora +2 more Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde... CVE-2015-8807 Fix available 6.1 MediumFebruary 28, 2016
• horde groupware, debian linux, horde application framework +2 more Multiple cross-site request forgery (CSRF) vulnerabilities in Horde before 5.2.8, Horde Groupware... CVE-2015-7984 Public exploitFix available 6.8 MediumNovember 3, 2015
• horde groupware, internet mail program +1 more Multiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) before 6... CVE-2014-4946 Fix available 4.3 MediumJuly 14, 2014
• horde groupware, internet mail program +1 more Multiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) before 6... CVE-2014-4945 Fix available 4.3 MediumJuly 14, 2014
• horde groupware, imp +1 more Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as... CVE-2012-6640 Fix available 4.3 MediumApril 5, 2014
• horde groupware, kronolith h4 +1 more Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4... CVE-2012-5567 4.3 MediumApril 5, 2014
• horde groupware, kronolith h4 +1 more Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4... CVE-2012-5566 4.3 MediumApril 5, 2014
• horde groupware, imp +1 more Cross-site scripting (XSS) vulnerability in js/compose-dimp.js in Horde Internet Mail Program ... CVE-2012-5565 4.3 MediumApril 5, 2014
• horde application framework The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1... CVE-2014-1691 Public exploitFix available EPSS 42.9% 7.5 HighFebruary 5, 2014
• horde kronolith h4 Multiple cross-site scripting (XSS) vulnerabilities in the (1) tasks and (2) search views in... CVE-2012-6620 Fix available 4.3 MediumJanuary 16, 2014
• horde groupware, horde +1 more Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed... CVE-2012-0209 Public exploit EPSS 71.9% 7.5 HighSeptember 25, 2012
• horde groupware webmail edition Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition before... CVE-2012-0909 4.3 MediumJanuary 24, 2012
• horde groupware webmail edition, imp, dynamic imp +2 more Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde... CVE-2012-0791 Fix available 4.3 MediumJanuary 24, 2012
• horde groupware, imp +1 more Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP before 4.3... CVE-2010-4778 4.3 MediumApril 1, 2011
• horde dynamic imp, groupware +1 more Cross-site scripting (XSS) vulnerability in Horde Dynamic IMP (DIMP) before 1.1.5, and Horde... CVE-2010-3693 4.3 MediumApril 1, 2011
• horde gollem Cross-site scripting (XSS) vulnerability in view.php in the file viewer in Horde Gollem before 1... CVE-2010-3447 4.3 MediumApril 1, 2011
• horde groupware, imp +1 more Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and... CVE-2010-3695 Public exploitFix available 4.3 MediumMarch 27, 2011
• Show olderLoading…