Roundcube Webmail vulnerabilities

• debian linux, fedoraproject fedora, roundcube webmail +2 more Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search... CVE-2021-44026 In KEVPublic exploitFix available EPSS 69.9% 9.8 CriticalNovember 19, 2021
• roundcube webmail, debian linux, fedoraproject fedora +2 more linkref_addindex in rcube_string_replacer.php in Roundcube Webmail before 1.4.10 allows XSS via a... CVE-2020-35730 In KEVPublic exploitFix available EPSS 32.9% 6.1 MediumDecember 28, 2020
• roundcube webmail, opensuse backports sle, leap +2 more rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via... CVE-2020-12641 In KEVPublic exploitFix available EPSS 84.4% 9.8 CriticalMay 4, 2020
• roundcube webmail, debian linux +1 more Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized... CVE-2017-16651 In KEVPublic exploitFix available EPSS 45.7% 7.8 HighNovember 9, 2017