CVE-2016-2228

CVE-2016-2228 is a cross-site scripting (XSS) vulnerability in Horde Groupware prior to 5.2.12 and Horde Groupware Webmail Edition prior to 5.2.12. The issue allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter, demonstrated by a request to xplorer/gollem/m...

CVE-2009-3237

The CVE-2009-3237 issue affects Horde Application Framework and related Groupware packages: XSS vulnerabilities in Horde App Framework versions before 3.2.5 (and 3.3.x before 3.3.5) and in Groupware 1.1.x before 1.1.6 and 1.2.x before 1.2.4, plus Groupware Webmail Edition 1.1/1.2 before these fix...