6 matches found
PT-2014-6225
Name of the Vulnerable Software and Affected Versions Horde Internet Mail Program IMP versions prior to 6.1.8 Horde Groupware Webmail Edition versions prior to 5.1.5 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified flags or...
CVE-2014-4945: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Horde Internet Mail Program IMP before 6.1.8, as used in Horde Groupware Webmail Edition before 5.1.5, allow remote attackers to inject arbitrary web script or HTML via an unspecified flag in the basic 1 mailbox or 2 message view...
CVE-2012-6640: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Horde Internet Mail Program IMP before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565...
PT-2014-2408
Name of the Vulnerable Software and Affected Versions Horde Internet Mail Program IMP versions prior to 5.0.22 Horde Groupware Webmail Edition versions prior to 4.0.9 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted SVG imag...
PT-2014-2339
Name of the Vulnerable Software and Affected Versions Horde Internet Mail Program IMP versions prior to 5.0.24 Horde Groupware Webmail Edition versions prior to 4.0.9 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafte...
CVE-2012-5565: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in js/compose-dimp.js in Horde Internet Mail Program IMP before 5.0.24, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted name for an attached file, related to the dynamic vi...