Skip to content

Roundcube vulnerabilities

Products

Newest

roundcube webmailAbsolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before...CVE-2015-8794Fix available6.5 MediumJanuary 29, 2016
roundcube webmailCross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube before 1.0.6...CVE-2015-8793Fix available6.1 MediumJanuary 29, 2016
roundcube webmailDirectory traversal vulnerability in the set_skin function in program/include/rcmail_output_html...CVE-2015-8770Public exploitFix availableEPSS 22.4%7.5 HighJanuary 17, 2016
roundcube webmail, opensuse +1 moreCross-site scripting (XSS) vulnerability in program/js/app.js in Roundcube webmail before 1.0.7...CVE-2015-8105Fix available3.5 LowNovember 10, 2015
roundcube webmailprogram/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2...CVE-2015-5382Fix available6.5 MediumOctober 14, 2015
roundcube webmailMultiple buffer overflows in the DBMail driver in the Password plugin in Roundcube before 1.1.0...CVE-2015-2181Fix available8.8 HighOctober 14, 2015
roundcube webmailThe DBMail driver in the Password plugin in Roundcube before 1.1.0 allows remote attackers to...CVE-2015-2180Fix available8.8 HighOctober 14, 2015
fedoraproject fedora, roundcube webmail +1 moreprogram/lib/Roundcube/rcube_washtml.php in Roundcube before 1.0.5 does not properly quote strings...CVE-2015-1433Fix available4.3 MediumFebruary 3, 2015
roundcube webmailMultiple cross-site request forgery (CSRF) vulnerabilities in Roundcube Webmail before 1.0.4...CVE-2014-9587Fix available6.8 MediumJanuary 15, 2015
roundcube webmailAbsolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7...CVE-2013-1904Fix available5.0 MediumFebruary 8, 2014
roundcube webmailsteps/utils/save_pref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9.5 allows remote...CVE-2013-6172Fix available7.5 HighOctober 27, 2013
roundcube webmailCross-site scripting (XSS) vulnerability in Roundcube webmail 1.0-git allows remote authenticated...CVE-2013-56463.5 LowAugust 29, 2013
roundcube webmailMultiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user...CVE-2013-5645Fix available4.3 MediumAugust 29, 2013
roundcube webmailCross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.8.5 allows remote...CVE-2012-61214.3 MediumFebruary 24, 2013
roundcube webmailCross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote...CVE-2012-4668Public exploitFix available4.3 MediumAugust 25, 2012
roundcube webmailCross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0...CVE-2012-3508Public exploitFix available4.3 MediumAugust 25, 2012
roundcube webmailCross-site scripting (XSS) vulnerability in program/steps/mail/func.inc in RoundCube Webmail...CVE-2012-35072.6 LowAugust 25, 2012
roundcube webmailCross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer...CVE-2012-1253Fix available2.6 LowJune 4, 2012
roundcube webmailinclude/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used,...CVE-2011-4078Fix available5.0 MediumNovember 3, 2011
roundcube webmailCross-site scripting (XSS) vulnerability in the UI messages functionality in Roundcube Webmail...CVE-2011-2937Fix available4.3 MediumSeptember 21, 2011
roundcube webmailsteps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request...CVE-2011-1492Fix available5.5 MediumApril 8, 2011
roundcube webmailThe login form in Roundcube Webmail before 0.5.1 does not properly handle a correctly...CVE-2011-1491Fix available3.5 LowApril 8, 2011
roundcube webmailRoundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain...CVE-2010-0464Fix available5.0 MediumJanuary 29, 2010
roundcube webmailCross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows...CVE-2009-4077Fix available6.8 MediumNovember 25, 2009
roundcube webmailCross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows...CVE-2009-4076Fix available6.8 MediumNovember 25, 2009
roundcube webmailCross-site scripting (XSS) vulnerability in RoundCube Webmail (roundcubemail) 0.2 stable allows...CVE-2009-0413Fix available4.3 MediumFebruary 3, 2009
roundcube webmailRoundCube Webmail (roundcubemail) before 0.2-beta allows remote attackers to cause a denial of...CVE-2008-5620Fix available7.8 HighDecember 17, 2008
roundcube webmailPHPMailer susceptible to arbitrary code executionCVE-2008-5619Public exploitFix availableEPSS 58.6%10.0 HighDecember 17, 2008
roundcube webmailCross-site scripting (XSS) vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier...CVE-2007-6321Public exploitFix available4.3 MediumDecember 12, 2007
roundcube webmailroundcube webmail Alpha, with a default high verbose level ($rcmail_config['debug_level'] = 1),...CVE-2005-43685.0 MediumDecember 20, 2005