CVE-2022-29360

The Email Viewer in RainLoop through 1.6.0 allows XSS via a crafted email message...

CVE-2025-30349

The Horde IMP webmail component (through version 6.2.27 ) used with the Horde Application Framework (through 5.2.23 ) is vulnerable to a Cross-Site Scripting (XSS) flaw. An attacker can achieve account takeover by sending a crafted text/html email message containing an onerror attribute, which ma...

PT-2015-3020

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2007 SP3 through 2016 Office versions 2010 SP2 Word 2010 version SP2 Word 2013 versions SP1 through RT SP1 Office Compatibility Pack version SP3 Description The issue allows remote attackers to execute arbitrary code vi...

CVE-2006-6712

Cross-site scripting XSS vulnerability in SugarCRM Open Source 4.5.0f and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages...

CVE-2006-6712: Undefined Security Weakness

Cross-site scripting XSS vulnerability in SugarCRM Open Source 4.5.0f and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages...