Web application abuses : Horde IMP HTML MIME Viewer XSS Vulnerabilities

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.15393

Category: Web application abuses

Title: Horde IMP HTML MIME Viewer XSS Vulnerabilities

Summary: The target is running at least one instance of Horde IMP whose version number; is between 3.0 and 3.2.5 inclusive.

Description: Summary:
The target is running at least one instance of Horde IMP whose version number
is between 3.0 and 3.2.5 inclusive.

Vulnerability Insight:
Such versions are vulnerable to several XSS attacks when viewing HTML messages
with the HTML MIME viewer and certain browsers.

For additional information, see the referenced 3.2.6 release announcement.

Solution:
Upgrade to Horde IMP version 3.2.6 or later.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N

Copyright Copyright (C) 2003-2004 George A. Theall

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.15393
Category:	Web application abuses
Title:	Horde IMP HTML MIME Viewer XSS Vulnerabilities
Summary:	The target is running at least one instance of Horde IMP whose version number; is between 3.0 and 3.2.5 inclusive.
Description:	Summary: The target is running at least one instance of Horde IMP whose version number is between 3.0 and 3.2.5 inclusive. Vulnerability Insight: Such versions are vulnerable to several XSS attacks when viewing HTML messages with the HTML MIME viewer and certain browsers. For additional information, see the referenced 3.2.6 release announcement. Solution: Upgrade to Horde IMP version 3.2.6 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Copyright	Copyright (C) 2003-2004 George A. Theall