CVE-2007-1515

🗓️ 20 Mar 2007 10:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 63 Views🌐 WEB

Multiple XSS vulnerabilities in Horde IMP H3 4.1.

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2007-1515	20 Mar 200710:00	–	cvelist
Exploit DB	Horde IMP Webmail 4.0.4 Client - Multiple Input Validation Vulnerabilities	15 Mar 200700:00	–	exploitdb
EUVD	EUVD-2007-1509	7 Oct 202500:30	–	euvd
NVD	CVE-2007-1515	20 Mar 200710:19	–	nvd
Prion	Cross site scripting	20 Mar 200710:19	–	prion
securityvulns	Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)	17 Mar 200700:00	–	securityvulns
UbuntuCve	CVE-2007-1515	20 Mar 200710:19	–	ubuntucve

NVD

Node

horde impRange≤4.1.3

Source	Link
securityfocus	www.securityfocus.com/bid/22975
vupen	www.vupen.com/english/advisories/2007/0964
securityfocus	www.securityfocus.com/archive/1/462914/100/0/threaded
securitytracker	www.securitytracker.com/id
lists	www.lists.grok.org.uk/pipermail/full-disclosure/2007-March/052977.html
lists	www.lists.horde.org/archives/announce/2007/000316.html
secunia	www.secunia.com/advisories/24541

Parameter	Position	Path	Description	CWE
edit_query	query param	horde/imp/search.php	Cross-site scripting via edit_query parameter in search.php	CWE-79
Subject	header	horde/imp/thread.php	Cross-site scripting via Subject header in thread.php	CWE-79

16 Jun 2026 22:37Current

6Medium risk

Vulners AI Score6

CVSS 24.3

EPSS0.02368

cve-2007-1515 cross-site scripting xss vulnerabilities horde imp h3 nvd