Vulnerability in Horde Imp
CVE-2007-1515
Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via (1) the email Subject header in thread.php, (2) the edit_query parameter in…
EPSS: 0.024 (82.0th percentile) — read the EPSS interpretation.
Affected products
- Horde Imp
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_FULLDISC)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)