Unscored DSA-1406-1 5 CVEs

horde3 - several vulnerabilities

Published Nov 9, 2007 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 3.1	horde3	3.0.4-4sarge6
Debian · 4.0	horde3	3.1.3-4etch1

Vulnerabilities 5

Unscored —

CVE-2006-3548

Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 throu…

Jul 13, 2006
Unscored —

CVE-2006-3549

services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict …

Jul 13, 2006
Unscored —

CVE-2006-4256

index.php in Horde Application Framework before 3.1.2 allows remote attackers to include web pages from other sites, wh…

Aug 21, 2006
Unscored —

CVE-2007-1473 Public exploit

Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login p…

Mar 16, 2007
Unscored —

CVE-2007-1474 Public exploit

Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Fra…

Mar 16, 2007