Vulnerabilities

TI-2008-06907 CVE-2008-7219 · GHSA-v979-m555-4gx8

Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and…

MEDIUM 48

Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Grou…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02744 Published 2009-09-13 No fix listed CWE-264

TI-2008-06906 CVE-2008-7218 · GHSA-jm6w-xv7f-69rg

Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2…

MEDIUM 47

Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 before 2.2-RC2; Kronolith H3 2.1 before 2.1.7 and H3 2.2 before 2.2-RC2; Nag H3 2.…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02202 Published 2009-09-13 No fix listed

TI-2005-03934 CVE-2005-4189 · GHSA-872c-p5hc-3585

Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3 before 2.0.6…

LOW 20

Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3 before 2.0.6 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Calendar name field when creating calendars, (2)…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01432 Published 2005-12-13 No fix listed

Vulnerabilities

Filters

Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and…

Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2…

Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3 before 2.0.6…