CVE-2012-0791

Published: Jan 24, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compose page; (4) formname parameter to the contacts popup window; or (5) IMAP mailbox names. NOTE: some of these details are obtained from third party information.

Affected (128)

Products: Horde: Dynamic Imp, Imp, Groupware Webmail Edition

Horde

3 products

Dynamic Imp

Imp

Groupware Webmail Edition

Configuration A

85 vulnerable

Vulnerable Software	Affected Versions
Horde Dynamic Imp	Up to 5.0.17
Horde Dynamic Imp	Version 1.0
Horde Dynamic Imp	Version 1.0 alpha
Horde Dynamic Imp	Version 1.0 rc1
Horde Dynamic Imp	Version 1.0 rc2
Horde Dynamic Imp	Version 1.0 rc3
Horde Dynamic Imp	Version 1.1.1
Horde Dynamic Imp	Version 1.1.2
Horde Dynamic Imp	Version 1.1.3
Horde Dynamic Imp	Version 1.1.4
Horde Dynamic Imp	Version 1.1.5
Horde Dynamic Imp	Version 1.1.6
Horde Dynamic Imp	Version 1.1
Horde Dynamic Imp	Version 1.1 rc1
Horde Dynamic Imp	Version 1.1 rc2
Horde Dynamic Imp	Version 5.0.10
Horde Dynamic Imp	Version 5.0.11
Horde Dynamic Imp	Version 5.0.12
Horde Dynamic Imp	Version 5.0.13
Horde Dynamic Imp	Version 5.0.14
Horde Dynamic Imp	Version 5.0.15
Horde Dynamic Imp	Version 5.0.16
Horde Dynamic Imp	Version 5.0.1
Horde Dynamic Imp	Version 5.0.2
Horde Dynamic Imp	Version 5.0.3
Horde Dynamic Imp	Version 5.0.4
Horde Dynamic Imp	Version 5.0.5
Horde Dynamic Imp	Version 5.0.6
Horde Dynamic Imp	Version 5.0.7
Horde Dynamic Imp	Version 5.0.8
Horde Dynamic Imp	Version 5.0.9
Horde Dynamic Imp	Version 5.0
Horde Imp	Version 2.0
Horde Imp	Version 2.2.1
Horde Imp	Version 2.2.2
Horde Imp	Version 2.2.3
Horde Imp	Version 2.2.4
Horde Imp	Version 2.2.5
Horde Imp	Version 2.2.6
Horde Imp	Version 2.2.7
Horde Imp	Version 2.2.8
Horde Imp	Version 2.2
Horde Imp	Version 2.3
Horde Imp	Version 3.0
Horde Imp	Version 3.1.2
Horde Imp	Version 3.1
Horde Imp	Version 3.2.1
Horde Imp	Version 3.2.2
Horde Imp	Version 3.2.3
Horde Imp	Version 3.2.4
Horde Imp	Version 3.2.5
Horde Imp	Version 3.2.6
Horde Imp	Version 3.2.7
Horde Imp	Version 3.2.7 rc1
Horde Imp	Version 3.2
Horde Imp	Version 4.0.1
Horde Imp	Version 4.0.2
Horde Imp	Version 4.0.3
Horde Imp	Version 4.0.4
Horde Imp	Version 4.0
Horde Imp	Version 4.1.3
Horde Imp	Version 4.1.5
Horde Imp	Version 4.1.6
Horde Imp	Version 4.2.1
Horde Imp	Version 4.2.2
Horde Imp	Version 4.2
Horde Imp	Version 4.3.1
Horde Imp	Version 4.3.2
Horde Imp	Version 4.3.3
Horde Imp	Version 4.3.4
Horde Imp	Version 4.3.5
Horde Imp	Version 4.3.6
Horde Imp	Version 4.3.7
Horde Imp	Version 4.3.8
Horde Imp	Version 4.3.9
Horde Imp	Version 4.3
Horde Imp	Version 5.0.1
Horde Imp	Version 5.0.2
Horde Imp	Version 5.0.3
Horde Imp	Version 5.0.4-git
Horde Imp	Version 5.0
Horde Imp	Version 5.0 alpha1
Horde Imp	Version 5.0 beta1
Horde Imp	Version 5.0 rc1
Horde Imp	Version 5.0 rc2

Configuration B

43 vulnerable

Vulnerable Software	Affected Versions
Horde Groupware Webmail Edition	Up to 4.0.5
Horde Groupware Webmail Edition	Version 1.0.1
Horde Groupware Webmail Edition	Version 1.0.2
Horde Groupware Webmail Edition	Version 1.0.3
Horde Groupware Webmail Edition	Version 1.0.4
Horde Groupware Webmail Edition	Version 1.0.5
Horde Groupware Webmail Edition	Version 1.0.6
Horde Groupware Webmail Edition	Version 1.0.7
Horde Groupware Webmail Edition	Version 1.0.8
Horde Groupware Webmail Edition	Version 1.0
Horde Groupware Webmail Edition	Version 1.0 rc1
Horde Groupware Webmail Edition	Version 1.0 rc2
Horde Groupware Webmail Edition	Version 1.1.1
Horde Groupware Webmail Edition	Version 1.1.2
Horde Groupware Webmail Edition	Version 1.1.3
Horde Groupware Webmail Edition	Version 1.1.4
Horde Groupware Webmail Edition	Version 1.1.5
Horde Groupware Webmail Edition	Version 1.1.6
Horde Groupware Webmail Edition	Version 1.1
Horde Groupware Webmail Edition	Version 1.1 rc1
Horde Groupware Webmail Edition	Version 1.1 rc2
Horde Groupware Webmail Edition	Version 1.1 rc3
Horde Groupware Webmail Edition	Version 1.1 rc4
Horde Groupware Webmail Edition	Version 1.2.10
Horde Groupware Webmail Edition	Version 1.2.1
Horde Groupware Webmail Edition	Version 1.2.2
Horde Groupware Webmail Edition	Version 1.2.3
Horde Groupware Webmail Edition	Version 1.2.3 rc1
Horde Groupware Webmail Edition	Version 1.2.4
Horde Groupware Webmail Edition	Version 1.2.5
Horde Groupware Webmail Edition	Version 1.2.6
Horde Groupware Webmail Edition	Version 1.2.7
Horde Groupware Webmail Edition	Version 1.2.8
Horde Groupware Webmail Edition	Version 1.2.9
Horde Groupware Webmail Edition	Version 1.2
Horde Groupware Webmail Edition	Version 1.2 rc1
Horde Groupware Webmail Edition	Version 4.0.1
Horde Groupware Webmail Edition	Version 4.0.2
Horde Groupware Webmail Edition	Version 4.0.3
Horde Groupware Webmail Edition	Version 4.0.4
Horde Groupware Webmail Edition	Version 4.0
Horde Groupware Webmail Edition	Version 4.0 rc1
Horde Groupware Webmail Edition	Version 4.0 rc2