Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Horde

Horde vulnerabilities

Products

Groupware46
Imp24
Horde18
Groupware Webmail Edition10
Application Framework9
Application Framework8
Kronolith3
Kronolith H33
Kronolith H43
Turba H33
Dynamic Imp2
Gollem2
Groupware Webmail Edition2
Groupware2
Image Api2
Imp2
Internet Mail Program2
Mnemo H32
Nag H32
Passwd2

Newest

Known exploitedIn KEVPublic exploitFix available

horde application frameworkCross-site request forgery (CSRF) vulnerability in the Horde Application Framework before 3.3.9...CVE-2010-36946.8 MediumNovember 9, 2010
horde application frameworkCross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application...CVE-2010-3077Public exploit4.3 MediumNovember 9, 2010
hordeThe IMP plugin in Horde allows remote attackers to bypass firewall restrictions and use Horde as...CVE-2010-16385.0 MediumJune 22, 2010
horde impHorde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain...CVE-2010-04635.0 MediumJanuary 29, 2010
horde application framework, groupware +1 moreText_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework before 3.3.6, Horde...CVE-2009-43634.3 MediumDecember 21, 2009
horde application framework, groupware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde...CVE-2009-3701Public exploit4.3 MediumDecember 21, 2009
horde groupware, application framework +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.2 before 3.2...CVE-2009-32374.3 MediumSeptember 17, 2009
horde application framework, groupware +1 moreThe form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware...CVE-2009-32364.3 MediumSeptember 17, 2009
horde groupware, groupware webmail edition, kronolith h3 +2 more +4 moreHorde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2...CVE-2008-721910.0 HighSeptember 13, 2009
horde groupware, groupware webmail edition, horde +4 more +6 moreUnspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3...CVE-2008-721810.0 HighSeptember 13, 2009
horde passwdCross-site scripting (XSS) vulnerability in passwd/main.php in the Passwd module before 3.1.1 for...CVE-2009-2360Public exploitFix available4.3 MediumJuly 8, 2009
horde turba h3Cross-site scripting (XSS) vulnerability in the contact display view in Turba Contact Manager H3...CVE-2008-67464.3 MediumApril 23, 2009
horde application frameworkCross-site scripting (XSS) vulnerability in the XSS filter (framework/Text_Filter/Filter/xss.php)...CVE-2008-59174.3 MediumJanuary 21, 2009
horde turba contact manager h3Cross-site scripting (XSS) vulnerability in imp/test.php in Horde Turba Contact Manager H3 2.2.1...CVE-2008-41824.3 MediumSeptember 23, 2008
horde, popoon +1 moreCross-site scripting (XSS) vulnerability in (1) Text_Filter/Filter/xss.php in Horde 3.1.x before...CVE-2008-3824Public exploit4.3 MediumSeptember 11, 2008
hordeCross-site scripting (XSS) vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3...CVE-2008-3823Public exploit4.3 MediumSeptember 11, 2008
horde groupware webmail editionMultiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have...CVE-2008-36509.0 HighAugust 13, 2008
horde groupware, groupware webmail edition, kronolith +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition...CVE-2008-2783Public exploit4.3 MediumJune 19, 2008
horde groupware, groupware webmail edition +1 moreCross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware...CVE-2008-1974Public exploitFix available4.3 MediumApril 27, 2008
horde groupware, groupware webmail edition, horde +2 moreDirectory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail...CVE-2008-1284Fix available6.0 MediumMarch 11, 2008
horde groupware, groupware webmail edition, turba contact manager +2 morelib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2...CVE-2008-0807Fix available4.9 MediumFebruary 19, 2008
horde framework, groupware webmail edition, horde +1 more +3 moreIMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition...CVE-2007-6018Fix available5.8 MediumJanuary 11, 2008
horde groupware** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware Webmail 1...CVE-2007-1679Disputed4.3 MediumMarch 26, 2007
horde impMultiple cross-site scripting (XSS) vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier,...CVE-2007-1515Public exploit4.3 MediumMarch 20, 2007
horde application framework, imp +1 moreArgument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before...CVE-2007-1474Public exploit6.8 MediumMarch 16, 2007
horde application frameworkCross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4...CVE-2007-1473Public exploit4.3 MediumMarch 16, 2007
horde groupwareUnspecified vulnerability in the calendar component in Horde Groupware Webmail Edition before 1.0...CVE-2007-05795.1 MediumJanuary 30, 2007
horde kronolithDirectory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7 and 2.1.x...CVE-2006-61757.5 HighNovember 30, 2006
horde ingo h3procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute...CVE-2006-5449Fix available6.5 MediumOctober 23, 2006
horde application frameworkindex.php in Horde Application Framework before 3.1.2 allows remote attackers to include web...CVE-2006-42564.3 MediumAugust 21, 2006
horde, horde imp +1 moreCross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3...CVE-2006-42554.3 MediumAugust 21, 2006
horde application frameworkservices/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does...CVE-2006-35495.0 MediumJuly 13, 2006
hordeMultiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through...CVE-2006-35484.3 MediumJuly 13, 2006
hordeCross-site scripting (XSS) vulnerability in horde 3 (horde3) before 3.1.1 allows remote attackers...CVE-2006-2195Fix available6.8 MediumJune 14, 2006
horde application frameworkEval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1...CVE-2006-1491Public exploitEPSS 39.2%7.5 HighMarch 29, 2006
hordeHorde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null...CVE-2006-1260Public exploitEPSS 12.5%5.0 MediumMarch 19, 2006
horde turba h3Multiple cross-site scripting (XSS) vulnerabilities in Horde Turba H3 2.0.4 and earlier allow...CVE-2005-42424.3 MediumDecember 14, 2005
horde nag task list manager h3Multiple cross-site scripting (XSS) vulnerabilities in templates/tasklists/tasklists.inc in Horde...CVE-2005-41913.5 LowDecember 13, 2005
horde application frameworkMultiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework before 3.0.8...CVE-2005-41903.5 LowDecember 13, 2005
horde kronolith h3Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3 before 2.0.6 allow...CVE-2005-4189Fix available3.5 LowDecember 13, 2005
horde impHorde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which...CVE-2005-4080Public exploit4.3 MediumDecember 8, 2005
hordeMultiple cross-site scripting (XSS) vulnerabilities in Horde before 3.0.7 allow remote attackers...CVE-2005-3759Fix available5.8 MediumNovember 22, 2005
hordeUnspecified cross-site scripting (XSS) vulnerability in Horde before 2.2.9 allows remote...CVE-2005-3570Fix available4.3 MediumNovember 16, 2005
hordeThe default installation of Horde 3.0.4 contains an administrative account with a blank password,...CVE-2005-3344Fix available10.0 HighNovember 7, 2005
horde nagCross-site scripting (XSS) vulnerability in Horde Nag Task List Manager before 1.1.3 allows...CVE-2005-13224.3 MediumApril 27, 2005
horde vactionCross-site scripting (XSS) vulnerability in Horde Vacation module before 2.2.2 allows remote...CVE-2005-13214.3 MediumApril 27, 2005
horde mnemoCross-site scripting (XSS) vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote...CVE-2005-13204.3 MediumApril 27, 2005
horde impCross-site scripting (XSS) vulnerability in Horde IMP Webmail client before 3.2.8 allows remote...CVE-2005-13194.3 MediumApril 27, 2005
horde forwardsCross-site scripting (XSS) vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2...CVE-2005-13184.3 MediumApril 27, 2005
horde accountsCross-site scripting (XSS) vulnerability in Horde Accounts module before 2.1.2 allows remote...CVE-2005-13164.3 MediumApril 27, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open