CVE-2004-1443

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the inline MIME viewer in Horde-IMP (Internet Messaging Program) 3.2.4 and earlier, when used with Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via an e-mail message.

Affected (19)

Products: Horde: Imp

Horde

1 product

Imp

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Horde Imp	Version 2.0
Horde Imp	Version 2.2.1
Horde Imp	Version 2.2.2
Horde Imp	Version 2.2.3
Horde Imp	Version 2.2.4
Horde Imp	Version 2.2.5
Horde Imp	Version 2.2.6
Horde Imp	Version 2.2.7
Horde Imp	Version 2.2.8
Horde Imp	Version 2.2
Horde Imp	Version 2.3
Horde Imp	Version 3.0
Horde Imp	Version 3.1.2
Horde Imp	Version 3.1
Horde Imp	Version 3.2.1
Horde Imp	Version 3.2.2
Horde Imp	Version 3.2.3
Horde Imp	Version 3.2.4
Horde Imp	Version 3.2