Horde Imp vulnerabilities

• horde imp Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Name CVE-2026-65053 5.1 MediumAugust 24, 2026
• horde imp Horde IMP < 7.0.1 Path Traversal via Compose.php img src CVE-2026-58451 7.1 HighJuly 1, 2026
• horde imp Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS... CVE-2025-30349 Public exploitFix available EPSS 31.3% 7.2 HighMarch 21, 2025
• 9folders nine, apple mail, bloop airmail +14 more +16 more The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can... CVE-2017-17689 Fix available 5.9 MediumMay 16, 2018
• apple mail, bloop airmail, emclient +8 more +10 more ** DISPUTED ** The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget... CVE-2017-17688 Fix availableDisputed 5.9 MediumMay 16, 2018
• horde groupware, imp +1 more Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as... CVE-2012-6640 Fix available 4.3 MediumApril 5, 2014
• horde groupware, imp +1 more Cross-site scripting (XSS) vulnerability in js/compose-dimp.js in Horde Internet Mail Program ... CVE-2012-5565 4.3 MediumApril 5, 2014
• horde groupware webmail edition, imp, dynamic imp +2 more Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde... CVE-2012-0791 Fix available 4.3 MediumJanuary 24, 2012
• horde groupware, imp +1 more Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP before 4.3... CVE-2010-4778 4.3 MediumApril 1, 2011
• horde dynamic imp, groupware +1 more Cross-site scripting (XSS) vulnerability in Horde Dynamic IMP (DIMP) before 1.1.5, and Horde... CVE-2010-3693 4.3 MediumApril 1, 2011
• horde groupware, imp +1 more Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and... CVE-2010-3695 Public exploitFix available 4.3 MediumMarch 27, 2011
• horde imp Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain... CVE-2010-0463 5.0 MediumJanuary 29, 2010
• horde framework, groupware webmail edition, horde +1 more +3 more IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition... CVE-2007-6018 Fix available 5.8 MediumJanuary 11, 2008
• horde imp Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier,... CVE-2007-1515 Public exploit 4.3 MediumMarch 20, 2007
• horde application framework, imp +1 more Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before... CVE-2007-1474 Public exploit 6.8 MediumMarch 16, 2007
• horde, horde imp +1 more Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3... CVE-2006-4255 4.3 MediumAugust 21, 2006
• horde imp Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which... CVE-2005-4080 Public exploit 4.3 MediumDecember 8, 2005
• horde imp Cross-site scripting (XSS) vulnerability in Horde IMP Webmail client before 3.2.8 allows remote... CVE-2005-1319 4.3 MediumApril 27, 2005
• horde imp Cross-site scripting (XSS) vulnerability in the inline MIME viewer in Horde-IMP (Internet... CVE-2004-1443 4.3 MediumDecember 31, 2004
• horde imp Unknown vulnerability in Horde IMP 3.2.3 and earlier, before a "security fix," does not properly... CVE-2004-0584 6.8 MediumJune 23, 2004
• horde imp Multiple SQL injection vulnerabilities in IMP 2.2.8 and earlier allow remote attackers to perform... CVE-2003-0025 Fix available EPSS 28.0% 7.5 HighJanuary 15, 2003
• horde imp Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request... CVE-2002-2024 5.0 MediumDecember 31, 2002
• horde, horde imp +1 more Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote... CVE-2002-0181 7.5 HighApril 22, 2002
• horde imp Horde IMP 2.2.4 and earlier allows local users to overwrite files via a symlink attack on a... CVE-2001-0744 2.1 LowOctober 12, 2001
• horde imp Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration... CVE-2001-1258 3.6 LowJuly 21, 2001
• horde imp Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2... CVE-2001-1257 7.5 HighJuly 21, 2001
• horde imp IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the... CVE-2000-0911 5.0 MediumDecember 19, 2000