Roundcube Webmail vulnerabilities

• roundcube webmail Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 on Windows allows command injection via... CVE-2024-37385 9.8 CriticalJune 7, 2024
• roundcube webmail, debian linux +1 more Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via list columns from user... CVE-2024-37384 Fix available 6.1 MediumJune 7, 2024
• roundcube webmail Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive information by... CVE-2015-5383 7.5 HighMay 23, 2017
• roundcube webmail Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube Webmail 1.1.x... CVE-2015-5381 Fix available 6.1 MediumMay 23, 2017
• roundcube webmail, opensuse leap, opensuse +2 more Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5... CVE-2016-4068 Fix available 6.1 MediumJune 30, 2016
• roundcube webmail, opensuse leap, opensuse +2 more Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5... CVE-2015-8864 Fix available 6.1 MediumApril 29, 2016
• roundcube webmail Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before... CVE-2015-8794 Fix available 6.5 MediumJanuary 29, 2016
• roundcube webmail Directory traversal vulnerability in the set_skin function in program/include/rcmail_output_html... CVE-2015-8770 Public exploitFix available EPSS 22.4% 7.5 HighJanuary 17, 2016
• roundcube webmail program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2... CVE-2015-5382 Fix available 6.5 MediumOctober 14, 2015