Filtered by vendor Horde Subscriptions
Filtered by product Imp Subscriptions
Total 22 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2006-4255 1 Horde 2 Horde, Imp 2025-04-03 N/A
Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related to folder names, as injected into the vfolder_label form field in the IMP search screen.
CVE-2005-1319 1 Horde 1 Imp 2025-04-03 N/A
Cross-site scripting (XSS) vulnerability in Horde IMP Webmail client before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.