CVE-2010-3695

🗓️ 31 Mar 2011 22:00:00Reported by redhatType

cve

cve🔗 web.nvd.nist.gov👁 60 Views

Cross-site scripting vulnerability in Horde IMP before 4.3.

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2010-3695	27 Sep 201000:00	–	circl
Cvelist	CVE-2010-3695	31 Mar 201122:00	–	cvelist
Debian	[SECURITY] [DSA 2204-1] imp4 security update	27 Mar 201110:39	–	debian
Tenable Nessus	Debian DSA-2204-1 : imp4 - insufficient input sanitising	28 Mar 201100:00	–	nessus
EUVD	EUVD-2010-3679	7 Oct 202500:30	–	euvd
NVD	CVE-2010-3695	31 Mar 201122:55	–	nvd
OpenVAS	Horde IMP Webmail 'fetchmailprefs.php' HTML Injection Vulnerability	28 Sep 201000:00	–	openvas
OpenVAS	Debian: Security Advisory (DSA-2204-1)	12 May 201100:00	–	openvas
OpenVAS	Debian Security Advisory DSA 2204-1 (imp4)	12 May 201100:00	–	openvas
OSV	DSA-2204-1 imp4 - Insufficient input sanitising	27 Mar 201100:00	–	osv

NVD

Node

horde impRange≤4.3.7

OR

horde impMatch2.0

OR

horde impMatch2.2

OR

horde impMatch2.2.1

OR

horde impMatch2.2.2

OR

horde impMatch2.2.3

OR

horde impMatch2.2.4

OR

horde impMatch2.2.5

OR

horde impMatch2.2.6

OR

horde impMatch2.2.7

OR

horde impMatch2.2.8

OR

horde impMatch2.3

OR

horde impMatch3.0

OR

horde impMatch3.1

OR

horde impMatch3.1.2

OR

horde impMatch3.2

OR

horde impMatch3.2.1

OR

horde impMatch3.2.2

OR

horde impMatch3.2.3

OR

horde impMatch3.2.4

OR

horde impMatch3.2.5

OR

horde impMatch3.2.6

OR

horde impMatch3.2.7

OR

horde impMatch3.2.7rc1

OR

horde impMatch4.0

OR

horde impMatch4.0.1

OR

horde impMatch4.0.2

OR

horde impMatch4.0.3

OR

horde impMatch4.0.4

OR

horde impMatch4.1.3

OR

horde impMatch4.1.5

OR

horde impMatch4.1.6

OR

horde impMatch4.2

OR

horde impMatch4.2.1

OR

horde impMatch4.2.2

OR

horde impMatch4.3

OR

horde impMatch4.3.1

OR

horde impMatch4.3.2

OR

horde impMatch4.3.3

OR

horde impMatch4.3.4

OR

horde impMatch4.3.5

OR

horde impMatch4.3.6

Node

horde groupwareRange≤1.2.6

OR

horde groupwareMatch1.0

OR

horde groupwareMatch1.0rc1

OR

horde groupwareMatch1.0rc2

OR

horde groupwareMatch1.0.1

OR

horde groupwareMatch1.0.2

OR

horde groupwareMatch1.0.3

OR

horde groupwareMatch1.0.4

OR

horde groupwareMatch1.0.5

OR

horde groupwareMatch1.0.6

OR

horde groupwareMatch1.0.7

OR

horde groupwareMatch1.0.8

OR

horde groupwareMatch1.1

OR

horde groupwareMatch1.1rc1

OR

horde groupwareMatch1.1rc2

OR

horde groupwareMatch1.1rc3

OR

horde groupwareMatch1.1rc4

OR

horde groupwareMatch1.1.1

OR

horde groupwareMatch1.1.2

OR

horde groupwareMatch1.1.3

OR

horde groupwareMatch1.1.4

OR

horde groupwareMatch1.1.5

OR

horde groupwareMatch1.1.6

OR

horde groupwareMatch1.2

OR

horde groupwareMatch1.2rc1

OR

horde groupwareMatch1.2.1

OR

horde groupwareMatch1.2.2

OR

horde groupwareMatch1.2.3

OR

horde groupwareMatch1.2.3rc1

OR

horde groupwareMatch1.2.4

OR

horde groupwareMatch1.2.5

Source	Link
secunia	www.secunia.com/advisories/41627
git	www.git.horde.org/diff.php/groupware/docs/webmail/CHANGES
openwall	www.openwall.com/lists/oss-security/2010/09/30/8
archives	www.archives.neohapsis.com/archives/fulldisclosure/2010-09/0379.html
debian	www.debian.org/security/2011/dsa-2204
secunia	www.secunia.com/advisories/43896
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi
securityfocus	www.securityfocus.com/archive/1/513992/100/0/threaded
openwall	www.openwall.com/lists/oss-security/2010/10/01/6
lists	www.lists.horde.org/archives/announce/2010/000558.html

29 Apr 2026 01:13Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24.3

EPSS0.01169

cve-2010-3695 cross-site scripting xss vulnerability fetchmailprefs.php horde imp horde groupware webmail edition web script html fm_id parameter fetchmail configuration nvd