CVE-2006-2195: horde

EPSS trend

Probability

2.22%

Chance of exploitation in the next 30 days

Percentile

82%

Versus all other CVEs

30-day change

0.00 pp

From 2.22% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

19 links

cvs.horde.org/diff.php?f=horde%2Ftest.php&r1=1.145&r2=1.146X Refsource CONFIRM
exchange.xforce.ibmcloud.com/vulnerabilities/27168VDB EntryX Refsource XF
secunia.com/advisories/20750Third Party AdvisoryX Refsource SECUNIAVendor Advisory
overlays.gentoo.org/dev/…X Refsource MISC
cvs.horde.org/diff.php?r1=2.25&r2=2.26&f=horde%2Ftemplates%2Fproblem%2Fproblem.incX Refsource CONFIRM
securitytracker.com/id?1016310VDB EntryX Refsource SECTRACK
www.debian.org/security/2006/dsa-1098Vendor AdvisoryX Refsource DEBIANPatch
secunia.com/advisories/20672Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2006/dsa-1099Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/20849Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 19 references

www.osvdb.org/26514VDB EntryX Refsource OSVDB
bugs.gentoo.org/show_bug.cgi?id=136830X Refsource CONFIRM
secunia.com/advisories/20661Third Party AdvisoryX Refsource SECUNIA
www.osvdb.org/26513VDB EntryX Refsource OSVDB
www.novell.com/linux/security/advisories/2006_16_sr.htmlVendor AdvisoryX Refsource SUSE
www.vupen.com/english/advisories/2006/2356VDB EntryX Refsource VUPEN
www.gentoo.org/security/en/glsa/glsa-200606-28.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/20960Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/18436VDB EntryX Refsource BID

Related vulnerabilities

CVE-2003-0728hordehorde1.09%23y ago03-09-2003 04:00Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL.CVE-2007-6018debianhorde3+41.77%18y ago11-01-2008 02:00IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) "purge" deleted emails via a crafted email message.CVE-2005-0378hordehorde1.29%21y ago13-02-2005 05:00Multiple cross-site scripting (XSS) vulnerabilities in Horde 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to prefs.php or (2) url parameter to index.php.CVE-2005-3570debianhorde2+11.71%20y ago16-11-2005 07:37Unspecified cross-site scripting (XSS) vulnerability in Horde before 2.2.9 allows remote attackers to inject arbitrary web script or HTML via "not properly escaped error messages".CVE-2005-3759debianhorde3+11.44%20y ago22-11-2005 21:00Multiple cross-site scripting (XSS) vulnerabilities in Horde before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) gzip/tar and (2) css MIME viewers, which do not filter or escape dangerous HTML when extracting and displaying attachments.CVE-2005-3344debianhorde3+17.99%20y ago16-11-2005 07:37The default installation of Horde 3.0.4 contains an administrative account with a blank password, which allows remote attackers to gain access.

All vulnerabilities inhorde

CVE-2006-2195: horde

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References