CVE ID:	CVE-2008-5917
Description:	Cross-site scripting (XSS) vulnerability in the XSS filter (framework/Text_Filter/Filter/xss.php) in Horde Application Framework 3.2.2 and 3.3, when Internet Explorer is being used, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to style attributes.
Test IDs:	1.3.6.1.4.1.25623.1.0.67200   1.3.6.1.4.1.25623.1.0.100117   1.3.6.1.4.1.25623.1.0.63792
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5917 34418 http://secunia.com/advisories/34418 34609 http://secunia.com/advisories/34609 SUSE-SR:2009:007 http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html [announce] Horde 3.2.3 (final) http://lists.horde.org/archives/announce/2008/000462.html [announce] Horde 3.3.1 (final) http://lists.horde.org/archives/announce/2008/000464.html http://cvs.horde.org/diff.php/framework/Text_Filter/Filter/xss.php?r1=1.17&r2=1.18 http://cvs.horde.org/diff.php/framework/Text_Filter/Filter/xss.php?r1=1.17&r2=1.18