Horde
Page 2 of 2 — Horde CVEs from a corpus of 118, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2005-1315 | | 2005-05-02 | Cross-site scripting (XSS) vulnerability in Horde Turba module before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the parent's fra… | |
CVE-2005-1314 | | 2005-05-02 | Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's… | |
CVE-2005-1313 | | 2005-05-02 | Cross-site scripting (XSS) vulnerability in Horde Passwd module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's fr… | |
CVE-2005-0961 | | 2005-05-02 | Cross-site scripting (XSS) vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame ti… | |
CVE-2005-0378 | | 2005-05-02 | Multiple cross-site scripting (XSS) vulnerabilities in Horde 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to p… | |
CVE-2005-1317 | | 2005-04-25 | Cross-site scripting (XSS) vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's fra… | |
CVE-2004-2741 | | 2004-12-31 | Cross-site scripting (XSS) vulnerability in the "help window" (help.php) in Horde Application Framework 2.2.6 allows remote attackers to inject arbitrary web s… | |
CVE-2004-1443 | | 2004-12-31 | Cross-site scripting (XSS) vulnerability in the inline MIME viewer in Horde-IMP (Internet Messaging Program) 3.2.4 and earlier, when used with Internet Explore… | |
CVE-2004-0584 | | 2004-08-06 | Unknown vulnerability in Horde IMP 3.2.3 and earlier, before a "security fix," does not properly validate input, which allows remote attackers to execute arbit… | |
CVE-2003-0728 | | 2003-10-20 | Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL. | |
CVE-2003-0025 | | 2003-01-17 | Multiple SQL injection vulnerabilities in IMP 2.2.8 and earlier allow remote attackers to perform unauthorized database activities and possibly gain privileges… | |
CVE-2002-2024 | Medium | 5.3 | 2002-12-31 | Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spel… |
CVE-2002-0181 | | 2002-04-22 | Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal cookies of ot… | |
CVE-2001-0744 | | 2001-10-18 | Horde IMP 2.2.4 and earlier allows local users to overwrite files via a symlink attack on a temporary file. | |
CVE-2001-1258 | | 2001-07-21 | Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the pre… | |
CVE-2001-1257 | | 2001-07-21 | Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript emb… | |
CVE-2000-0911 | | 2000-12-19 | IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes IMP to send the fil… | |
CVE-2000-0910 | | 2000-12-19 | Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address. |