CVE-2013-6364: Improper Neutralization of Input During Web Page Generation

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...