Test ID:	1.3.6.1.4.1.25623.1.0.13857
Category:	Web application abuses
Title:	Horde IMP HTML+TIME XSS Vulnerability
Summary:	The remote server is running at least one instance of Horde IMP whose; version number is 3.2.4 or lower.
Description:	Summary: The remote server is running at least one instance of Horde IMP whose version number is 3.2.4 or lower. Vulnerability Insight: Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to inject arbitrary content, including script, in a specially crafted MIME message. To have an effect, the victim must be using Internet Explorer to access IMP and be using the inline MIME viewer for HTML messages. This vulnerability is a variation on the one reported in the referenced links. Solution: Upgrade to Horde IMP version 3.2.5 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1443 BugTraq ID: 10845 http://www.securityfocus.com/bid/10845 http://www.gentoo.org/security/en/glsa/glsa-200408-07.xml http://secunia.com/advisories/12202/ XForce ISS Database: imp-html-viewer-xss(16866) https://exchange.xforce.ibmcloud.com/vulnerabilities/16866
Copyright	Copyright (C) 2004 George A. Theall

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.