Test ID:	1.3.6.1.4.1.25623.1.0.12263
Category:	Web application abuses
Title:	Horde IMP Content-Type XSS Vulnerability
Summary:	The remote server is running at least one instance of Horde IMP whose version; number is between 2.0 and 3.2.3 inclusive.
Description:	Summary: The remote server is running at least one instance of Horde IMP whose version number is between 2.0 and 3.2.3 inclusive. Vulnerability Insight: Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to cause a victim to unknowingly run arbitrary Javascript code simply by reading a MIME message with a specially crafted Content-Type header. For information about the vulnerability, including exploits, see the referenced links. Solution: Upgrade to Horde IMP version 3.2.4 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0584 BugTraq ID: 10501 http://www.securityfocus.com/bid/10501 http://www.gentoo.org/security/en/glsa/glsa-200406-11.xml http://www.horde.org/imp/3.2/ http://secunia.com/advisories/11805 XForce ISS Database: imp-content-type-xss(16357) https://exchange.xforce.ibmcloud.com/vulnerabilities/16357
Copyright	Copyright (C) 2004 George A. Theall

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.