Horde vulnerabilities
116 vulnerabilities
Known vulnerabilities in Horde products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 36 products.
Products
36- Groupware45 vulnerabilities
- Imp24 vulnerabilities
- Horde17 vulnerabilities
- Groupware Webmail Edition11 vulnerabilities
- Horde Application Framework9 vulnerabilities
- Application Framework8 vulnerabilities
- Kronolith H33 vulnerabilities
- Kronolith H43 vulnerabilities
- Turba H33 vulnerabilities
- Dynamic Imp2 vulnerabilities
- Gollem2 vulnerabilities
- Horde Groupware2 vulnerabilities
- Horde Image Api2 vulnerabilities
- Horde Imp2 vulnerabilities
- Internet Mail Program2 vulnerabilities
- Kronolith2 vulnerabilities
- Mnemo H32 vulnerabilities
- Nag H32 vulnerabilities
- Passwd2 vulnerabilities
- Accounts1 vulnerabilities
- Chora1 vulnerabilities
- Forwards1 vulnerabilities
- Framework1 vulnerabilities
- Horde Form1 vulnerabilities
- Horde Image1 vulnerabilities
- Horde Ldap1 vulnerabilities
- Horde Mime Viewer1 vulnerabilities
- Ingo H31 vulnerabilities
- Mnemo1 vulnerabilities
- Nag1 vulnerabilities
- Nag Task List Manager H31 vulnerabilities
- Turba1 vulnerabilities
- Turba Contact Manager1 vulnerabilities
- Turba Contact Manager H31 vulnerabilities
- Vaction1 vulnerabilities
- Vfs1 vulnerabilities
CVE-2003-0728hordehorde
EPSS score1.09%
Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL.CVE-2003-0025debianimp+1EPSS score27.97%
Multiple SQL injection vulnerabilities in IMP 2.2.8 and earlier allow remote attackers to perform unauthorized database activities and possibly gain privileges via certain database functions such as check_prefs() in db.pgsql, as demonstrated using mailbox.php3.CVE-2013-6364debianphp-horde-turba+3EPSS score2.08%
Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address bookCVE-2013-6275debianphp-horde-ingo+3EPSS score2.07%
Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.CVE-2013-6365debianphp-horde+5EPSS score1.06%
Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissionsCVE-2021-26929debianphp-horde-text-filter+3EPSS score4.94%
An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, because bespoke use of \x00\x00\x00 and \x01\x01\x01 interferes with XSS defenses.CVE-2015-7984debianphp-horde+3EPSS score4.12%
Multiple cross-site request forgery (CSRF) vulnerabilities in Horde before 5.2.8, Horde Groupware before 5.2.11, and Horde Groupware Webmail Edition before 5.2.11 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary (1) commands via the cmd parameter to admin/cmdshell.php, (2) SQL queries via the sql parameter to admin/sqlshell.php, or (3) PHP code via the php parameter to admin/phpshell.php.CVE-2015-8807debianphp-horde-core+4EPSS score2.06%
Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via vectors involving numeric form fields.CVE-2007-1474hordehorde_application_framework+1EPSS score5.10%
Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain privileges via multiple space-delimited pathnames.CVE-2007-1473hordehorde_application_frameworkEPSS score5.32%
Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a language selection box, allows remote attackers to inject arbitrary web script or HTML via the new_lang parameter to login.php.CVE-2007-1679hordegroupwareEPSS score0.91%
Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware Webmail 1.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in (1) imp/search.php and (2) ingo/rule.php. NOTE: this issue has been disputed by the vendor, noting that the search.php issue was resolved in CVE-2006-4255, and attackers can only use rule.php to inject XSS into their own pagesCVE-2007-1515hordeimpEPSS score2.44%
Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via (1) the email Subject header in thread.php, (2) the edit_query parameter in search.php, or other unspecified parameters in search.php. NOTE: some of these details are obtained from third party information.CVE-2007-0579hordegroupwareEPSS score1.42%
Unspecified vulnerability in the calendar component in Horde Groupware Webmail Edition before 1.0, and Groupware before 1.0, allows remote attackers to include certain files via unspecified vectors. NOTE: some of these details are obtained from third party information.CVE-2007-6018debianhorde3+4EPSS score1.77%
IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) "purge" deleted emails via a crafted email message.CVE-2016-2228debianphp-horde+5EPSS score1.87%
Cross-site scripting (XSS) vulnerability in horde/templates/topbar/_menubar.html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter, as demonstrated by a request to xplorer/gollem/manager.php.CVE-2016-5303debianphp-horde-text-filter+2EPSS score1.51%
Cross-site scripting (XSS) vulnerability in the Horde Text Filter API in Horde Groupware and Horde Groupware Webmail Edition before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via crafted data:text/html content in a form (1) action or (2) xlink attribute.CVE-2025-41066debianphp-horde-groupware+2EPSS score0.24%
Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid accounts on the system. To exploit the vulnerability, an HTTP request must be sent to ‘/imp/attachment.php’ including the parameters ‘id’ and ‘u’. If the specified user exists, the server will return the download of an empty file; if it does not exist, no download will be initiated, which unequivocally reveals the validity of the user.CVE-2025-30349debianphp-horde-imp+3EPSS score31.29%
Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account takeover via a crafted text/html e-mail message with an onerror attribute (that may use base64-encoded JavaScript code), as exploited in the wild in March 2025.CVE-2020-8035debianphp-horde+2EPSS score0.88%
The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (XSS) vulnerability via an SVG image upload containing a JavaScript payload. An attacker can obtain access to a victim's webmail account by making them visit a malicious URL.CVE-2020-8518debianphp-horde-data+4EPSS score71.73%
Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution.