CVE-2014-4945

no score yetEPSS 1.3%

Multiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) before 6.1.8, as used in Horde Groupware Webmail Edition before 5.1.5, allow remote attackers to inject arbitrary web script or HTML via an unspecified flag in the basic (1) mailbox or (2) message view.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-07-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

horde:groupware
horde:internet_mail_program

References

http://lists.horde.org/archives/announce/2014/001019.html
http://lists.horde.org/archives/announce/2014/001025.html
http://secunia.com/advisories/59770
http://secunia.com/advisories/59772
https://github.com/horde/horde/blob/4513649810f13a32f1193bdeed76f7d85a5efa05/bundles/webmail/docs/CHANGES

Check your stack JSON