Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: Horde Component: Groupware Webmail Edition Clear all filters
TI-2012-00836 CVE-2012-0909 · GHSA-j799-rw8j-47jp

Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to email verification…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01781 Published 2012-01-24 No fix listed CWE-79
TI-2008-06907 CVE-2008-7219 · GHSA-v979-m555-4gx8

Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and…

Priority MEDIUM 48

Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Grou…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02744 Published 2009-09-13 No fix listed CWE-264
TI-2008-02658 CVE-2008-2783 · GHSA-598g-8pp7-hcwv

Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow remote attackers to inject arbitrary web script or HTML via the timestamp parameter to (1) week.php,…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01505 Published 2008-06-19 No fix listed CWE-79
TI-2008-01897 CVE-2008-1974 · GHSA-249v-v545-hw42

Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7…

Priority LOW 28

Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and Groupware 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the url parameter…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04883 Published 2008-04-27 No fix listed CWE-79
TI-2008-01234 CVE-2008-1284 · GHSA-7mw7-mpj3-2hr3

Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware…

Priority LOW 30

Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with certain configurations, allows remote authenticated users to read and execute arbitr…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01677 Published 2008-03-11 No fix listed CWE-22
TI-2008-00773 CVE-2008-0807 · GHSA-vv7v-g229-vwgh

lib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x…

Priority LOW 25

lib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, as used in products such as Horde Groupware before 1.0.4 and Horde Groupware Webmail Edition before 1.0.5, does not p…

CVSS 2.0MEDIUM 4.9 Network Low privileges Interaction — EPSS 0.01383 Published 2008-02-19 No fix listed CWE-264
TI-2007-05756 CVE-2007-6018 · GHSA-cg63-j5p8-vpwf

IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail…

Priority LOW 30

IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages vi…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01774 Published 2008-01-11 No fix listed CWE-264