Skip to content
OpenAdvisories

Package · Debian

php-horde-imp

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Medium 6.1
    CVE-2026-65053

    Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Name

    Horde IMP's AppleDouble MIME viewer writes an attacker-controlled attachment name into an HTML status block without escaping it. In lib/Mime/Viewer/Appledouble.php, _IMPrender() obtains the name of the data part with IMP_Contents::getPartName(), which returns…

    horde imp php-horde-imp php-horde-imp Debian Ubuntu
  • Medium 6.5
    CVE-2026-58451

    Horde IMP < 7.0.1 Path Traversal via Compose.php img src

    Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server filesystem by embedding traversal sequences after a CKEditor path prefix in img src URLs. Attackers c…

    horde imp php-horde-imp php-horde-imp Debian Ubuntu
  • High 7.2
    CVE-2025-30349 Public exploit EPSS 31%

    Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account tak…

    horde imp php-horde-imp php-horde Debian Ubuntu
  • Unscored —
    CVE-2014-4945

    Multiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) before 6.1.8, as used in Horde…

    php-horde-imp Debian
  • Unscored —
    CVE-2014-4946

    Multiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) before 6.1.8, as used in Horde…

    php-horde-imp Debian
  • Unscored —
    CVE-2012-6640

    Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as used in Horde Groupware…

    php-horde-imp Debian