Horde Groupware vulnerabilities

• horde groupware Disclosure of sensitive information in Horde Groupware CVE-2025-41066 6.9 MediumDecember 2, 2025
• horde groupware, debian linux +1 more Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which... CVE-2022-30287 Fix available EPSS 69.4% 8.0 HighJuly 28, 2022
• horde groupware, debian linux +1 more An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the... CVE-2021-26929 Public exploitFix available 6.1 MediumFebruary 14, 2021
• horde gollem, groupware +1 more Gollem before 3.0.13, as used in Horde Groupware Webmail Edition 5.2.22 and other products, is... CVE-2020-8034 Fix available 6.1 MediumMay 18, 2020
• horde groupware The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a... CVE-2020-8035 Fix available 6.1 MediumMay 18, 2020
• horde groupware, groupware webmail edition, debian linux +1 more +3 more This vulnerability allows remote attackers to create arbitrary files on affected installations of... CVE-2020-8866 Public exploitFix available 4.3 MediumMarch 23, 2020
• horde groupware, groupware webmail edition, debian linux +2 more This vulnerability allows remote attackers to execute local PHP files on affected installations... CVE-2020-8865 Public exploitFix available 6.3 MediumMarch 23, 2020
• horde groupware, debian linux, fedoraproject fedora +2 more Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data,... CVE-2020-8518 Public exploitFix available EPSS 71.7% 9.8 CriticalFebruary 17, 2020
• horde groupware, debian linux +1 more Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php. CVE-2013-6275 Public exploitFix available 6.5 MediumNovember 5, 2019
• horde groupware, debian linux, opensuse +2 more Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions CVE-2013-6365 Fix available 5.3 MediumNovember 5, 2019
• horde groupware, debian linux +1 more Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book CVE-2013-6364 Public exploitFix available 8.8 HighNovember 5, 2019
• horde groupware Horde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows... CVE-2019-12095 Fix available 8.8 HighOctober 24, 2019
• horde groupware Horde Groupware Webmail Edition through 5.2.22 allows XSS via an admin/user.php?form=update_f... CVE-2019-12094 6.1 MediumOctober 24, 2019
• horde groupware, debian linux +1 more Remote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17. Horde/Form... CVE-2019-9858 Public exploitFix available EPSS 18.8% 8.8 HighMay 29, 2019
• horde groupware In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource.... CVE-2017-16908 Fix available 5.4 MediumNovember 20, 2017
• horde groupware In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action. CVE-2017-16907 Fix available 5.4 MediumNovember 20, 2017
• horde groupware In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -> New Event"... CVE-2017-16906 Fix available 5.4 MediumNovember 20, 2017
• horde groupware The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to... CVE-2017-15235 Public exploitFix available 7.5 HighOctober 11, 2017
• horde groupware In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition 5.x through 5.2.17, OS... CVE-2017-7414 Fix available 7.5 HighApril 4, 2017
• horde groupware In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS... CVE-2017-7413 Fix available EPSS 39.2% 8.8 HighApril 4, 2017
• horde groupware Cross-site scripting (XSS) vulnerability in the Horde Text Filter API in Horde Groupware and... CVE-2016-5303 Fix available 6.1 MediumDecember 20, 2016
• horde groupware, debian linux, fedoraproject fedora +2 more Cross-site scripting (XSS) vulnerability in horde/templates/topbar/_menubar.html.php in Horde... CVE-2016-2228 Fix available 6.1 MediumFebruary 28, 2016
• horde groupware, debian linux, fedoraproject fedora +2 more Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde... CVE-2015-8807 Fix available 6.1 MediumFebruary 28, 2016
• horde groupware, debian linux, horde application framework +2 more Multiple cross-site request forgery (CSRF) vulnerabilities in Horde before 5.2.8, Horde Groupware... CVE-2015-7984 Public exploitFix available 6.8 MediumNovember 3, 2015
• horde groupware, internet mail program +1 more Multiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) before 6... CVE-2014-4946 Fix available 4.3 MediumJuly 14, 2014
• horde groupware, internet mail program +1 more Multiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) before 6... CVE-2014-4945 Fix available 4.3 MediumJuly 14, 2014
• horde groupware, imp +1 more Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as... CVE-2012-6640 Fix available 4.3 MediumApril 5, 2014
• horde groupware, kronolith h4 +1 more Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4... CVE-2012-5567 4.3 MediumApril 5, 2014
• horde groupware, kronolith h4 +1 more Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4... CVE-2012-5566 4.3 MediumApril 5, 2014
• horde groupware, imp +1 more Cross-site scripting (XSS) vulnerability in js/compose-dimp.js in Horde Internet Mail Program ... CVE-2012-5565 4.3 MediumApril 5, 2014
• horde groupware, horde +1 more Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed... CVE-2012-0209 Public exploit EPSS 71.9% 7.5 HighSeptember 25, 2012
• horde groupware webmail edition Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition before... CVE-2012-0909 4.3 MediumJanuary 24, 2012
• horde groupware webmail edition, imp, dynamic imp +2 more Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde... CVE-2012-0791 Fix available 4.3 MediumJanuary 24, 2012
• horde groupware, imp +1 more Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP before 4.3... CVE-2010-4778 4.3 MediumApril 1, 2011
• horde dynamic imp, groupware +1 more Cross-site scripting (XSS) vulnerability in Horde Dynamic IMP (DIMP) before 1.1.5, and Horde... CVE-2010-3693 4.3 MediumApril 1, 2011
• horde groupware, imp +1 more Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and... CVE-2010-3695 Public exploitFix available 4.3 MediumMarch 27, 2011
• horde application framework, groupware +1 more Text_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework before 3.3.6, Horde... CVE-2009-4363 4.3 MediumDecember 21, 2009
• horde application framework, groupware +1 more Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde... CVE-2009-3701 Public exploit 4.3 MediumDecember 21, 2009
• horde groupware, application framework +1 more Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.2 before 3.2... CVE-2009-3237 4.3 MediumSeptember 17, 2009
• horde application framework, groupware +1 more The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware... CVE-2009-3236 4.3 MediumSeptember 17, 2009
• horde groupware, groupware webmail edition, kronolith h3 +2 more +4 more Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2... CVE-2008-7219 10.0 HighSeptember 13, 2009
• horde groupware, groupware webmail edition, horde +4 more +6 more Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3... CVE-2008-7218 10.0 HighSeptember 13, 2009
• horde groupware webmail edition Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have... CVE-2008-3650 9.0 HighAugust 13, 2008
• horde groupware, groupware webmail edition, kronolith +2 more Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition... CVE-2008-2783 Public exploit 4.3 MediumJune 19, 2008
• horde groupware, groupware webmail edition +1 more Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware... CVE-2008-1974 Public exploitFix available 4.3 MediumApril 27, 2008
• horde groupware, groupware webmail edition, horde +2 more Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail... CVE-2008-1284 Fix available 6.0 MediumMarch 11, 2008
• horde groupware, groupware webmail edition, turba contact manager +2 more lib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2... CVE-2008-0807 Fix available 4.9 MediumFebruary 19, 2008
• horde framework, groupware webmail edition, horde +1 more +3 more IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition... CVE-2007-6018 Fix available 5.8 MediumJanuary 11, 2008
• horde groupware ** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware Webmail 1... CVE-2007-1679 Disputed 4.3 MediumMarch 26, 2007
• horde groupware Unspecified vulnerability in the calendar component in Horde Groupware Webmail Edition before 1.0... CVE-2007-0579 5.1 MediumJanuary 30, 2007