CVE-2012-0791

no score yetEPSS 2.3%

Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compose page; (4) formname parameter to the contacts popup window; or (5) IMAP mailbox names. NOTE: some of these details are obtained from third party information.

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2012-01-24
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

horde:dynamic_imp
horde:groupware_webmail_edition
horde:imp

References

http://secunia.com/advisories/47580
http://secunia.com/advisories/47592
http://www.debian.org/security/2012/dsa-2485
http://www.horde.org/apps/imp/docs/CHANGES
http://www.horde.org/apps/imp/docs/RELEASE_NOTES

Check your stack JSON