GCVE - cpe:2.3:a:horde:imp:5.0:alpha1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:horde:imp:5.0:alpha1:*:*:*:*:*:*

part: a version: 5.0 update: alpha1

Vendor	Horde (`11d5bec1-2c1f-5ad3-b7a5-41ab167a139d`)
Product	Imp (`f9cbfa66-e64c-5353-af44-312425addd1c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/php-horde-imp`	purl2cpe	2026-06-01 10:15:53.847161
`pkg:deb/ubuntu/php-horde-imp`	purl2cpe	2026-06-01 10:15:53.847163
`pkg:github/horde/imp`	purl2cpe	2026-06-01 10:15:53.847164
`pkg:rpm/fedora/php-horde-imp`	purl2cpe	2026-06-01 10:15:53.847165

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-6640`	vulnerable	2026-06-08 05:03:01.369579	Details available Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565. Published: 2014-04-05T21:00:00.000Z Updated: 2024-09-16T17:14:04.724Z Open on db.gcve.eu Reference links http://lists.horde.org/archives/announce/2012/000775.html https://github.com/horde/horde/commit/08c699f744b6d2be1a5f3a2ba7203f4631b4c5dc http://lists.horde.org/archives/announce/2012/000840.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0791`	vulnerable	2026-06-08 05:00:45.284967	Details available Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compose page; (4) formname parameter to the contacts popup window; or (5) IMAP mailbox names. NOTE: some of these details are obtained from third party information. Published: 2012-01-24T18:00:00.000Z Updated: 2024-08-06T18:38:14.284Z Open on db.gcve.eu Reference links http://www.horde.org/apps/webmail/docs/CHANGES http://www.debian.org/security/2012/dsa-2485 http://www.horde.org/apps/webmail/docs/RELEASE_NOTES http://www.securitytracker.com/id?1026553 http://www.horde.org/apps/imp/docs/RELEASE_NOTES	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.